Comment 33 for bug 1837252

Revision history for this message
Satish Patel (satish-txt) wrote :

I have same issue. my instance can see all other instance traffic in tcpdump running on same compute machine (This is very big security issue)

This is what i have queens deployment on CentOS 7.5 has ageing time: 300

[root@ostack-compute-100 ~]# brctl showstp brq01c26fd6-d8
brq01c26fd6-d8
 bridge id 8000.6c3be5a5ab2c
 designated root 8000.6c3be5a5ab2c
 root port 0 path cost 0
 max age 20.00 bridge max age 20.00
 hello time 2.00 bridge hello time 2.00
 forward delay 0.00 bridge forward delay 0.00
 ageing time 300.00
 hello timer 0.00 tcn timer 0.00
 topology change timer 0.00 gc timer 85.81
 flags

On stein i have ageing time: 0 (On this host all vm can see each other traffic in tcpdump)

[root@ostack-compute-bld-gen-2-33 ~]# brctl showstp brq74f3e57c-69
brq74f3e57c-69
 bridge id 8000.8cdcd4aec090
 designated root 8000.8cdcd4aec090
 root port 0 path cost 0
 max age 20.00 bridge max age 20.00
 hello time 2.00 bridge hello time 2.00
 forward delay 0.00 bridge forward delay 0.00
 ageing time 0.00
 hello timer 0.00 tcn timer 0.00
 topology change timer 0.00 gc timer 0.01
 flags