yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #64728
[Bug 1697334] [NEW] Use the IP from allow address pair to launch VM will cause issue if the ip in the same subnet
Public bug reported:
repo
------------
1. net with a subnet '10.0.0.0/26'
2. specify a IP address(10.0.0.10) in 'allowed_address_pairs' fields to create a port with the net. called Port1
3. specify the same IP address(10.0.0.10) in 'fixed_ip' fields to create another port with the net. called Port2
4. launch VMs with both of the ports. Port1 -- VM1 Port2 -- VM2.
Now VM1 and VM2 will use the same IP address(10.0.0.10) to access the external enviroment, VM2 is OK, but VM1 is not.
Just an example, if we set interface in a router, the default gateway of this subnet is 10.0.0.1. We can find the '10.0.0.10' ARP entry of the router namespace is VM2's port. So VM2 ping gateway is OK, but VM1 not. And the packets on gateway port'qr-XXXXX' we can see. All the Ping request packets which use 10.0.0.10 as Src ip from VM1 are accepted, but the qrouter namespace will send the Ping resp to VM2. I don't think this is a valid case.
** Affects: neutron
Importance: Undecided
Assignee: zhaobo (zhaobo6)
Status: New
** Changed in: neutron
Assignee: (unassigned) => zhaobo (zhaobo6)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1697334
Title:
Use the IP from allow address pair to launch VM will cause issue if
the ip in the same subnet
Status in neutron:
New
Bug description:
repo
------------
1. net with a subnet '10.0.0.0/26'
2. specify a IP address(10.0.0.10) in 'allowed_address_pairs' fields to create a port with the net. called Port1
3. specify the same IP address(10.0.0.10) in 'fixed_ip' fields to create another port with the net. called Port2
4. launch VMs with both of the ports. Port1 -- VM1 Port2 -- VM2.
Now VM1 and VM2 will use the same IP address(10.0.0.10) to access the external enviroment, VM2 is OK, but VM1 is not.
Just an example, if we set interface in a router, the default gateway of this subnet is 10.0.0.1. We can find the '10.0.0.10' ARP entry of the router namespace is VM2's port. So VM2 ping gateway is OK, but VM1 not. And the packets on gateway port'qr-XXXXX' we can see. All the Ping request packets which use 10.0.0.10 as Src ip from VM1 are accepted, but the qrouter namespace will send the Ping resp to VM2. I don't think this is a valid case.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1697334/+subscriptions