devstack

  1. Bug #1252620
  2. Comment #0

Comment 0 for bug 1252620

Revision history for this message
Yair Fried (yfried) wrote : security groups don't block unwanted traffic

VM is reachable even though there's no ingress rule in its security group

how to reproduce:
1. empty security group (with 2 only default egress rules)
2. VM booted to this secgorup

Expected results:
VM should be unreachable.

Actual results:
VM is reachable via ping and ssh

Additional info:
to easily reproduce this bug simply run tempest test "scenario/test_network_basic_ops" after disabling rule creation in manager._create_security_group() (line 521)

**happens only in devstack and tempest neutron gate. not on my regular RHOS setup