← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1728495] [NEW] When the remote security group and the remote IP are configured at the same time, the remote IP rule is ignored.

 

Public bug reported:

①Only configure the remote IP flow table as follows:
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56     
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56 

②Configure the remote security group and the remote IP flow table as follows:
table=82, priority=70,ct_state=+new-est,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(7,1/2),conjunction(11,1/2)     
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(6,1/2),conjunction(10,1/2)
table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=conjunction(10,2/2)     
table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=conjunction(11,2/2)     
table=82, priority=70,conj_id=10,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56     
table=82, priority=70,conj_id=11,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56

The rules for remote IP are ignored!

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1728495

Title:
  When the remote security group and the remote IP are configured at the
  same time, the remote IP rule is ignored.

Status in neutron:
  New

Bug description:
  ①Only configure the remote IP flow table as follows:
  table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56     
  table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56 

  ②Configure the remote security group and the remote IP flow table as follows:
  table=82, priority=70,ct_state=+new-est,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(7,1/2),conjunction(11,1/2)     
  table=82, priority=70,ct_state=+est-rel-rpl,ip,reg6=0xd,nw_src=10.10.10.13 actions=conjunction(6,1/2),conjunction(10,1/2)
  table=82, priority=70,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=conjunction(10,2/2)     
  table=82, priority=70,ct_state=+new-est,ip,reg5=0x38 actions=conjunction(11,2/2)     
  table=82, priority=70,conj_id=10,ct_state=+est-rel-rpl,ip,reg5=0x38 actions=output:56     
  table=82, priority=70,conj_id=11,ct_state=+new-est,ip,reg5=0x38 actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:56

  The rules for remote IP are ignored!

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1728495/+subscriptions