On 11/16/2017 07:35 AM, Brian Haley wrote:
> Sarah - is it possible for you to test my proposed change? It's
> basically doing what you said - move the rules to the nat table
> PREROUTING chain. Thanks.
>
We have very similar code and deployed a similar change to our own systems, but as I said we're not bona fide openstack users. I can't easily test it.
It looks to me like the change as written may cause issues if the update is made to a system actively running VMs. I don't know if that's supposed to
be a supported use case or not.
On 11/16/2017 07:35 AM, Brian Haley wrote:
> Sarah - is it possible for you to test my proposed change? It's
> basically doing what you said - move the rules to the nat table
> PREROUTING chain. Thanks.
>
We have very similar code and deployed a similar change to our own systems, but as I said we're not bona fide openstack users. I can't easily test it.
It looks to me like the change as written may cause issues if the update is made to a system actively running VMs. I don't know if that's supposed to
be a supported use case or not.
--Sarah