Comment 12 for bug 1732294

Revision history for this message
Sarah Newman (srn-f) wrote : Re: [Bug 1732294] Re: Probable DOS in linuxbridge

On 11/16/2017 07:35 AM, Brian Haley wrote:
> Sarah - is it possible for you to test my proposed change? It's
> basically doing what you said - move the rules to the nat table
> PREROUTING chain. Thanks.
>

We have very similar code and deployed a similar change to our own systems, but as I said we're not bona fide openstack users. I can't easily test it.

It looks to me like the change as written may cause issues if the update is made to a system actively running VMs. I don't know if that's supposed to
be a supported use case or not.

--Sarah