commit 9cec5ddfbf58ea4d13b0648bed3763575ad48574
Author: Nagendra E S <email address hidden>
Date: Fri Jul 6 10:44:17 2018 +0530
If I install a software simple gateway (vgw) on a compute
node and create in one virtual network 2 virtual machines,
each of them with default security group and attach a
floating IP to each of those 2 VMs I can ping by default
the VM which runs on the compute node where the vgw was
installed but cannot ping the VM which is runing on the
second compute node.
The normal behavior should be that by default (as long
as in the security default rule the ingress rule uses
the default security group as "Address" instead of
0.0.0.0/0 the ping on floating IPs should not work.
Code needs to be added to treat the special case of the
vgw interface - which is an interface of type INET and
sub-type SIMPLE_GATEWAY. After these changes the security
group rules will be respected for floating IPs on both
compute nodes.
Reviewed: https:/ /review. opencontrail. org/44838 github. com/Juniper/ contrail- controller/ commit/ 9cec5ddfbf58ea4 d13b0648bed3763 575ad48574
Committed: http://
Submitter: Zuul v3 CI (<email address hidden>)
Branch: master
commit 9cec5ddfbf58ea4 d13b0648bed3763 575ad48574
Author: Nagendra E S <email address hidden>
Date: Fri Jul 6 10:44:17 2018 +0530
If I install a software simple gateway (vgw) on a compute
node and create in one virtual network 2 virtual machines,
each of them with default security group and attach a
floating IP to each of those 2 VMs I can ping by default
the VM which runs on the compute node where the vgw was
installed but cannot ping the VM which is runing on the
second compute node.
The normal behavior should be that by default (as long
as in the security default rule the ingress rule uses
the default security group as "Address" instead of
0.0.0.0/0 the ping on floating IPs should not work.
Code needs to be added to treat the special case of the
vgw interface - which is an interface of type INET and
sub-type SIMPLE_GATEWAY. After these changes the security
group rules will be respected for floating IPs on both
compute nodes.
Cherry-Pick from review: /review. opencontrail. org/#/c/ 38460/
https:/
Change-Id: If05f3b61471a95 f6b123be7f86ff2 cdbb9d011eb
Partial-Bug: #1736972