Neutron l3 agent should not add metadata filter rules if metadata proxy is disabled

Bug #1224290 reported by Xiang Hui
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Low
Xiang Hui

Bug Description

Rule "iptables -t nat -A neutron-l3-agent-INPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 9697 -j ACCEPT" will be added into iptables even though Neutron metadata proxy is disabled, it's not reasonable.

Tags: l3-ipam-dhcp
Xiang Hui (xianghui)
tags: added: l3-ipam-dhcp
Xiang Hui (xianghui)
summary: - Neutron l3 agent should remove metadata filter rules if disable metadata
- proxy
+ Neutron l3 agent should not add metadata filter rules if disable
+ metadata proxy
summary: - Neutron l3 agent should not add metadata filter rules if disable
- metadata proxy
+ Neutron l3 agent should not add metadata filter rules if metadata proxy
+ is disabled
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/46200

Changed in neutron:
assignee: nobody → Xiang Hui (xianghui)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: master
Review: https://review.openstack.org/48880

Changed in neutron:
importance: Undecided → Low
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/48880
Committed: http://github.com/openstack/neutron/commit/db4b8afd1d7b42d7c6fd4ccbe35531a7dcf4898d
Submitter: Jenkins
Branch: master

commit db4b8afd1d7b42d7c6fd4ccbe35531a7dcf4898d
Author: Hui HX Xiang <email address hidden>
Date: Sun Sep 29 19:48:51 2013 -0700

    Should not add metadata filter rules if disable metadata proxy

    The metadata filter rules should not be added into iptables if Neutron
    metadata proxy is disabled.
    This patchset fixes this issue by adding a condition when adding metadata
    filter rules to iptables.

    Closes-Bug #1224290

    Change-Id: I7f14d281c31c1828a90abac8821635773238b2d0

Changed in neutron:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in neutron:
milestone: none → havana-rc1
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in neutron:
milestone: havana-rc1 → 2013.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.