security group denies TCP flows when chassis-snat is enabled
The ingress packet should pass through security group flows to let
CT to update the state of the flow. Otherwise, the subsequent flows
would be blocked by the security group because of a invalid state of
the flow
Reviewed: https:/ /review. openstack. org/602215 /git.openstack. org/cgit/ openstack/ dragonflow/ commit/ ?id=74a54b44468 cb16500e5564836 18bdb626ee00a7
Committed: https:/
Submitter: Zuul
Branch: master
commit 74a54b44468cb16 500e556483618bd b626ee00a7
Author: wangjian <email address hidden>
Date: Thu Sep 13 09:46:30 2018 +0800
security group denies TCP flows when chassis-snat is enabled
The ingress packet should pass through security group flows to let
CT to update the state of the flow. Otherwise, the subsequent flows
would be blocked by the security group because of a invalid state of
the flow
Change-Id: I94cb3ec06d1b13 35586c353a35020 c9655d520af
Closes-Bug: 1792307