commit a388f78c8cb4b1c860bfc11029b5210955f1932d
Author: Hong Hui Xiao <email address hidden>
Date: Thu May 12 05:48:15 2016 +0000
DVR: Pings to floatingip returns with fixed-ip on same network
Pinging a floatingip of VM1 from a second VM(VM2) which has SNAT
enabled connected to a DVR router on the same network returns
with fixed-ip address rather than the floatingip address.
The NAT forwarding rules for floatingip in the router namespace
does not check for the in coming port and tries to add the rule
for all in coming ports.
This causes the packets that are originating from the router
namespace to be modified and forwarded directly to the VM2 fixed
ip instead of forwarding the traffic to the SNAT namespace.
The fix in here will make sure that for all routers, the floatingip
forwarding rules will be applied only to the 'rfp-' internal ports
and not to all ports.
Reviewed: https:/ /review. openstack. org/289172 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=a388f78c8cb 4b1c860bfc11029 b5210955f1932d
Committed: https:/
Submitter: Jenkins
Branch: master
commit a388f78c8cb4b1c 860bfc11029b521 0955f1932d
Author: Hong Hui Xiao <email address hidden>
Date: Thu May 12 05:48:15 2016 +0000
DVR: Pings to floatingip returns with fixed-ip on same network
Pinging a floatingip of VM1 from a second VM(VM2) which has SNAT
enabled connected to a DVR router on the same network returns
with fixed-ip address rather than the floatingip address.
The NAT forwarding rules for floatingip in the router namespace
does not check for the in coming port and tries to add the rule
for all in coming ports.
This causes the packets that are originating from the router
namespace to be modified and forwarded directly to the VM2 fixed
ip instead of forwarding the traffic to the SNAT namespace.
The fix in here will make sure that for all routers, the floatingip
forwarding rules will be applied only to the 'rfp-' internal ports
and not to all ports.
Change-Id: I9453beffd94bf6 85afd74b0820506 fb6b7c996c4
Closes-Bug: #1462154
Co-Authored-By: Hong Hui Xiao <email address hidden>