← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1735866] Re: Snat namespace misses iptables rules for floating ip.

 

** Project changed: fuel-plugin-contrail => neutron

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1735866

Title:
  Snat namespace misses iptables rules for floating ip.

Status in neutron:
  New

Bug description:
  For DVR, the following iptables rule is missed in the snat namespace:
  "-A neutron-l3-agent-snat -j neutron-l3-agent-float-snat"

  This results in that snat rules will work instead of floating ip when
  accessing to the internet.

  Adding following code at [1] can fix this:

  self.snat_iptables_manager.ipv4['nat'].add_rule('snat',
                                                              '-j $float-snat')

  [1]https://github.com/openstack/neutron/blob/master/neutron/agent/l3/dvr_edge_router.py#L197

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1735866/+subscriptions