yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #68894
[Bug 1728479] [NEW] some security-group rules will be covered.
Public bug reported:
1. create security-group anquanzu01, anquanzu02
2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02.
3. vm1 can ping vm2 well, but vm2 can not ping vm1.
anquanzu01, anquanzu02 are as follows:
[root@172e18e211e96 ~]# neutron security-group-show anquanzu01
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value |
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:01Z |
| description | |
| id | b089348a-f939-43f8-bdd2-d7b54376f640 |
| name | anquanzu01 |
| project_id | 2acab64182334292a9bf5f3cdd5b3428 |
| revision_number | 6 |
| security_group_rules | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": "icmp", |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:26:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:26:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "1b7a4a06-e762-487a-9776-0d9d781f537c" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb" |
| | } |
| | { |
| | "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": "tcp", |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": 22, |
| | "updated_at": "2017-10-19T04:25:42Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": 22, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:25:42Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909" |
| | } |
| | { |
| | "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd" |
| | } |
| tags | |
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428 |
| updated_at | 2017-10-19T04:26:01Z |
+----------------------+--------------------------------------------------------------------+
[root@172e18e211e96 ~]# neutron security-group-show anquanzu02
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value |
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:11Z |
| description | |
| id | 20633d95-15e0-43e2-90e1-5e66a50619c2 |
| name | anquanzu02 |
| project_id | 2acab64182334292a9bf5f3cdd5b3428 |
| revision_number | 41 |
| security_group_rules | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": null, |
| | "updated_at": "2017-10-20T06:26:09Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-20T06:26:09Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "0dbcf71d-b90a-452c-a641-d9923db2364a" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:11Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:11Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737" |
| | } |
| tags | |
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428 |
| updated_at | 2017-10-20T06:26:09Z |
+----------------------+--------------------------------------------------------------------+
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1728479
Title:
some security-group rules will be covered.
Status in neutron:
New
Bug description:
1. create security-group anquanzu01, anquanzu02
2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02.
3. vm1 can ping vm2 well, but vm2 can not ping vm1.
anquanzu01, anquanzu02 are as follows:
[root@172e18e211e96 ~]# neutron security-group-show anquanzu01
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value |
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:01Z |
| description | |
| id | b089348a-f939-43f8-bdd2-d7b54376f640 |
| name | anquanzu01 |
| project_id | 2acab64182334292a9bf5f3cdd5b3428 |
| revision_number | 6 |
| security_group_rules | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": "icmp", |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:26:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:26:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "1b7a4a06-e762-487a-9776-0d9d781f537c" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb" |
| | } |
| | { |
| | "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": "tcp", |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": 22, |
| | "updated_at": "2017-10-19T04:25:42Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": 22, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:25:42Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909" |
| | } |
| | { |
| | "remote_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:01Z", |
| | "security_group_id": "b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd" |
| | } |
| tags | |
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428 |
| updated_at | 2017-10-19T04:26:01Z |
+----------------------+--------------------------------------------------------------------+
[root@172e18e211e96 ~]# neutron security-group-show anquanzu02
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value |
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:11Z |
| description | |
| id | 20633d95-15e0-43e2-90e1-5e66a50619c2 |
| name | anquanzu02 |
| project_id | 2acab64182334292a9bf5f3cdd5b3428 |
| revision_number | 41 |
| security_group_rules | { |
| | "remote_group_id": null, |
| | "direction": "ingress", |
| | "protocol": null, |
| | "description": "", |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": "0.0.0.0/0", |
| | "port_range_max": null, |
| | "updated_at": "2017-10-20T06:26:09Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-20T06:26:09Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "0dbcf71d-b90a-452c-a641-d9923db2364a" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv6", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:11Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3" |
| | } |
| | { |
| | "remote_group_id": null, |
| | "direction": "egress", |
| | "protocol": null, |
| | "description": null, |
| | "tags": [], |
| | "ethertype": "IPv4", |
| | "remote_ip_prefix": null, |
| | "port_range_max": null, |
| | "updated_at": "2017-10-19T04:14:11Z", |
| | "security_group_id": "20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null, |
| | "revision_number": 0, |
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z", |
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737" |
| | } |
| tags | |
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428 |
| updated_at | 2017-10-20T06:26:09Z |
+----------------------+--------------------------------------------------------------------+
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1728479/+subscriptions
Follow ups