yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #68896
[Bug 1728495] [NEW] When the remote security group and the remote IP are configured at the same time, the remote IP rule is ignored.
Public bug reported:
①Only configure the remote IP flow table as follows:
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56
②Configure the remote security group and the remote IP flow table as follows:
table=82, priority=70,ct_state=+new-est,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(7,1/2),conjunction(11,1/2)
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(6,1/2),conjunction(10,1/2)
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=conjunction(10,2/2)
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=conjunction(11,2/2)
table=82, priority=70,conj_id=10,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56
table=82, priority=70,conj_id=11,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56
The rules for remote IP are ignored!
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1728495
Title:
When the remote security group and the remote IP are configured at the
same time, the remote IP rule is ignored.
Status in neutron:
New
Bug description:
①Only configure the remote IP flow table as follows:
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56
②Configure the remote security group and the remote IP flow table as follows:
table=82, priority=70,ct_state=+new-est,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(7,1/2),conjunction(11,1/2)
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(6,1/2),conjunction(10,1/2)
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=conjunction(10,2/2)
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=conjunction(11,2/2)
table=82, priority=70,conj_id=10,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56
table=82, priority=70,conj_id=11,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56
The rules for remote IP are ignored!
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1728495/+subscriptions