yahoo-eng-team team mailing list archive

[OpenStack Infra <1799137@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/614452
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=b8d2ab8543a27b03bde534ef994027d9b44556c4
Submitter: Zuul
Branch:    master

commit b8d2ab8543a27b03bde534ef994027d9b44556c4
Author: LIU Yulong <i@xxxxxxxxxxxx>
Date:   Mon Oct 8 14:52:16 2018 +0800

    Prevent create port forwarding to port which has binding fip
    
    For dvr scenario, if port has a bound floating, and then create
    port forwarding to it, this port forwarding will not work, due to
    the traffic is redirected to dvr rules.
    
    This patch restricts such API request, if user try to create port
    forwarding to a port, check if it has bound floating IP first.
    This will be run for all type of routers, since neutron should
    not let user to waste public IP address on a port which already
    has a floating IP, it can take care all the procotol port
    numbers.
    
    Closes-Bug: #1799137
    Change-Id: I4ba4b023d79185f8d478d60ce16417d3501bf785


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1799137

Title:
  [l3][port_forwarding] should not allow creating port_forwarding to a
  port which already has a binding floating IP

Status in neutron:
  Fix Released

Bug description:
  Should not allow creating port_forwarding to a port which already has
  a binding floating IP for dvr routers.

  ENV: devstack master

  step to reproduce:
  1. create one distributed router, and connected it to private subnet, and set public gateway.
  2. create VM to the private subnet
  3. binding floating IP A to VM port
  4. create floating IP B with port forwarding to the VM port

  Then floating IP B with port forwarding will not work. This should be
  restricted by neutron.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1799137/+subscriptions