neutron

  1. Bug #1611991
  2. Comment #0

Comment 0 for bug 1611991

Revision history for this message
Inessa Vasilevskaya (ivasilevskaya) wrote : [ovs firewall] Port 23 is open on booted vms with only ping/ssh on 22 allowed.

Seen on master devstack, ubuntu xenial.

Steps to reproduce:

1. Enable ovs firewall in /etc/neutron/plugins/ml2/ml2.conf

[securitygroup]
firewall_driver = openvswitch

2. Create a security group with icmp, tcp to 22.

3. Boot a VM, assign a floating ip.

4. Check that port 23 can be accessed.