By default, iptables apply is deferred in L3 agent. For
external gateways, iptables is applied immediately (to
enable NAT for floating IP). Similarly, when firewall
is created/updated/deleted, iptable rules are applies
immediately.
Change-Id: I4f652a030ae23a71a2e20af2e8ef0ad5b882b80e
Closes-Bug: #1320775
(cherry picked from commit 6167cb55e2f62a645487d66e52b809c9599b3bb8)
Reviewed: https:/ /review. openstack. org/98206 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=cd7a622d3b6 a3c1d0e6d810993 e2b78adb232b9a
Committed: https:/
Submitter: Jenkins
Branch: stable/icehouse
commit cd7a622d3b6a3c1 d0e6d810993e2b7 8adb232b9a
Author: Rajesh Mohan <email address hidden>
Date: Tue May 20 19:41:26 2014 -0700
Do not defer IPTables apply in firewall path
By default, iptables apply is deferred in L3 agent. For updated/ deleted, iptable rules are applies
external gateways, iptables is applied immediately (to
enable NAT for floating IP). Similarly, when firewall
is created/
immediately.
Change-Id: I4f652a030ae23a 71a2e20af2e8ef0 ad5b882b80e 45487d66e52b809 c9599b3bb8)
Closes-Bug: #1320775
(cherry picked from commit 6167cb55e2f62a6