← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1728479] [NEW] some security-group rules will be covered.

 

Public bug reported:

1. create security-group anquanzu01, anquanzu02
2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02.
3. vm1 can ping vm2 well, but vm2 can not ping vm1.

anquanzu01, anquanzu02 are as follows:
 
[root@172e18e211e96 ~]# neutron security-group-show anquanzu01
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field                | Value                                                              |
+----------------------+--------------------------------------------------------------------+
| created_at           | 2017-10-19T04:14:01Z                                               |
| description          |                                                                    |
| id                   | b089348a-f939-43f8-bdd2-d7b54376f640                               |
| name                 | anquanzu01                                                         |
| project_id           | 2acab64182334292a9bf5f3cdd5b3428                                   |
| revision_number      | 6                                                                  |
| security_group_rules | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "ingress",                                       |
|                      |      "protocol": "icmp",                                           |
|                      |      "description": "",                                            |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:26:01Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:26:01Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "1b7a4a06-e762-487a-9776-0d9d781f537c"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "egress",                                        |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv6",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:01Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",    |
|                      |      "direction": "ingress",                                       |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv6",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:01Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "ingress",                                       |
|                      |      "protocol": "tcp",                                            |
|                      |      "description": "",                                            |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
|                      |      "port_range_max": 22,                                         |
|                      |      "updated_at": "2017-10-19T04:25:42Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": 22,                                         |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:25:42Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "egress",                                        |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:01Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",    |
|                      |      "direction": "ingress",                                       |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
|                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:01Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd"                  |
|                      | }                                                                  |
| tags                 |                                                                    |
| tenant_id            | 2acab64182334292a9bf5f3cdd5b3428                                   |
| updated_at           | 2017-10-19T04:26:01Z                                               |
+----------------------+--------------------------------------------------------------------+

[root@172e18e211e96 ~]# neutron security-group-show anquanzu02
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field                | Value                                                              |
+----------------------+--------------------------------------------------------------------+
| created_at           | 2017-10-19T04:14:11Z                                               |
| description          |                                                                    |
| id                   | 20633d95-15e0-43e2-90e1-5e66a50619c2                               |
| name                 | anquanzu02                                                         |
| project_id           | 2acab64182334292a9bf5f3cdd5b3428                                   |
| revision_number      | 41                                                                 |
| security_group_rules | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "ingress",                                       |
|                      |      "protocol": null,                                             |
|                      |      "description": "",                                            |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-20T06:26:09Z",                         |
|                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-20T06:26:09Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "0dbcf71d-b90a-452c-a641-d9923db2364a"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "egress",                                        |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv6",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:11Z",                         |
|                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:11Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3"                  |
|                      | }                                                                  |
|                      | {                                                                  |
|                      |      "remote_group_id": null,                                      |
|                      |      "direction": "egress",                                        |
|                      |      "protocol": null,                                             |
|                      |      "description": null,                                          |
|                      |      "tags": [],                                                   |
|                      |      "ethertype": "IPv4",                                          |
|                      |      "remote_ip_prefix": null,                                     |
|                      |      "port_range_max": null,                                       |
|                      |      "updated_at": "2017-10-19T04:14:11Z",                         |
|                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
|                      |      "port_range_min": null,                                       |
|                      |      "revision_number": 0,                                         |
|                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
|                      |      "created_at": "2017-10-19T04:14:11Z",                         |
|                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
|                      |      "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737"                  |
|                      | }                                                                  |
| tags                 |                                                                    |
| tenant_id            | 2acab64182334292a9bf5f3cdd5b3428                                   |
| updated_at           | 2017-10-20T06:26:09Z                                               |
+----------------------+--------------------------------------------------------------------+

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1728479

Title:
  some security-group rules will be covered.

Status in neutron:
  New

Bug description:
  1. create security-group anquanzu01, anquanzu02
  2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02.
  3. vm1 can ping vm2 well, but vm2 can not ping vm1.

  anquanzu01, anquanzu02 are as follows:
   
  [root@172e18e211e96 ~]# neutron security-group-show anquanzu01
  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
  +----------------------+--------------------------------------------------------------------+
  | Field                | Value                                                              |
  +----------------------+--------------------------------------------------------------------+
  | created_at           | 2017-10-19T04:14:01Z                                               |
  | description          |                                                                    |
  | id                   | b089348a-f939-43f8-bdd2-d7b54376f640                               |
  | name                 | anquanzu01                                                         |
  | project_id           | 2acab64182334292a9bf5f3cdd5b3428                                   |
  | revision_number      | 6                                                                  |
  | security_group_rules | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "ingress",                                       |
  |                      |      "protocol": "icmp",                                           |
  |                      |      "description": "",                                            |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:26:01Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:26:01Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "1b7a4a06-e762-487a-9776-0d9d781f537c"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "egress",                                        |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv6",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",    |
  |                      |      "direction": "ingress",                                       |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv6",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "ingress",                                       |
  |                      |      "protocol": "tcp",                                            |
  |                      |      "description": "",                                            |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
  |                      |      "port_range_max": 22,                                         |
  |                      |      "updated_at": "2017-10-19T04:25:42Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": 22,                                         |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:25:42Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "egress",                                        |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",    |
  |                      |      "direction": "ingress",                                       |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:01Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd"                  |
  |                      | }                                                                  |
  | tags                 |                                                                    |
  | tenant_id            | 2acab64182334292a9bf5f3cdd5b3428                                   |
  | updated_at           | 2017-10-19T04:26:01Z                                               |
  +----------------------+--------------------------------------------------------------------+

  [root@172e18e211e96 ~]# neutron security-group-show anquanzu02
  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
  +----------------------+--------------------------------------------------------------------+
  | Field                | Value                                                              |
  +----------------------+--------------------------------------------------------------------+
  | created_at           | 2017-10-19T04:14:11Z                                               |
  | description          |                                                                    |
  | id                   | 20633d95-15e0-43e2-90e1-5e66a50619c2                               |
  | name                 | anquanzu02                                                         |
  | project_id           | 2acab64182334292a9bf5f3cdd5b3428                                   |
  | revision_number      | 41                                                                 |
  | security_group_rules | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "ingress",                                       |
  |                      |      "protocol": null,                                             |
  |                      |      "description": "",                                            |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": "0.0.0.0/0",                              |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-20T06:26:09Z",                         |
  |                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-20T06:26:09Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "0dbcf71d-b90a-452c-a641-d9923db2364a"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "egress",                                        |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv6",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:11Z",                         |
  |                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:11Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3"                  |
  |                      | }                                                                  |
  |                      | {                                                                  |
  |                      |      "remote_group_id": null,                                      |
  |                      |      "direction": "egress",                                        |
  |                      |      "protocol": null,                                             |
  |                      |      "description": null,                                          |
  |                      |      "tags": [],                                                   |
  |                      |      "ethertype": "IPv4",                                          |
  |                      |      "remote_ip_prefix": null,                                     |
  |                      |      "port_range_max": null,                                       |
  |                      |      "updated_at": "2017-10-19T04:14:11Z",                         |
  |                      |      "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2",  |
  |                      |      "port_range_min": null,                                       |
  |                      |      "revision_number": 0,                                         |
  |                      |      "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",              |
  |                      |      "created_at": "2017-10-19T04:14:11Z",                         |
  |                      |      "project_id": "2acab64182334292a9bf5f3cdd5b3428",             |
  |                      |      "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737"                  |
  |                      | }                                                                  |
  | tags                 |                                                                    |
  | tenant_id            | 2acab64182334292a9bf5f3cdd5b3428                                   |
  | updated_at           | 2017-10-20T06:26:09Z                                               |
  +----------------------+--------------------------------------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1728479/+subscriptions


Follow ups