yahoo-eng-team team mailing list archive

[ZongKai LI <lzklibj@xxxxxxxxxx>]

Public bug reported:

For security group rules, when they have 'ethertype'='ipv6' and only
protocol values are different(icmp, or icmpv6, or ipv6-icmp), they
should be considered as duplicated.

e.g. using the following CLI commands to create sg rules, SecurityGroupRuleExists exception should raise:
>> neutron security-group-rule-create --ethertype ipv6 --protocol icmp SG_ID
>> neutron security-group-rule-create --ethertype ipv6 --protocol icmpv6 SG_ID
>> neutron security-group-rule-create --ethertype ipv6 --protocol ipv6-icmp SG_ID

User could understand they are just different alias, and we don't need
"duplicated" entries to deal with.

** Affects: neutron
     Importance: Undecided
     Assignee: ZongKai LI (lzklibj)
         Status: In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1582500

Title:
  icmp, icmpv6 and ipv6-icmp should raise duplicated sg rule exception

Status in neutron:
  In Progress

Bug description:
  For security group rules, when they have 'ethertype'='ipv6' and only
  protocol values are different(icmp, or icmpv6, or ipv6-icmp), they
  should be considered as duplicated.

  e.g. using the following CLI commands to create sg rules, SecurityGroupRuleExists exception should raise:
  >> neutron security-group-rule-create --ethertype ipv6 --protocol icmp SG_ID
  >> neutron security-group-rule-create --ethertype ipv6 --protocol icmpv6 SG_ID
  >> neutron security-group-rule-create --ethertype ipv6 --protocol ipv6-icmp SG_ID

  User could understand they are just different alias, and we don't need
  "duplicated" entries to deal with.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1582500/+subscriptions