Comment 4 for bug 1527675

If we look into iptables output:

http://logs.openstack.org/35/187235/11/experimental/gate-grenade-dsvm-neutron-multinode/a5af283/logs/iptables.txt.gz

we can see that only one of iptables tables contain a rule to allow port 22 connections, while it's clear from grenade log that multiple secgroups and ports were created to allow port 22 requests. It also suggests that at least some secgroup updates did not apply on l2 agent side.