You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2014/05/16 13:24:27 UTC
[jira] [Commented] (CLOUDSTACK-6685) OVS distributed firewall:
source CIDR mismatch while populating ingress & egress network ACL
[ https://issues.apache.org/jira/browse/CLOUDSTACK-6685?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13998676#comment-13998676 ]
ASF subversion and git services commented on CLOUDSTACK-6685:
-------------------------------------------------------------
Commit 9105c779e988983b16afdab0689320f3d0f70f5a in cloudstack's branch refs/heads/master from [~murali.reddy]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=9105c77 ]
CLOUDSTACK-6685: OVS distributed firewall: source CIDR mismatch while
populating ingress & egress network ACL
fix ensures propoer values for nw_src and nw_dst are popoluated
depending on the ingress or egress acl
> OVS distributed firewall: source CIDR mismatch while populating ingress & egress network ACL
> --------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6685
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6685
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the default.)
> Affects Versions: 4.4.0
> Reporter: Murali Reddy
> Assignee: Murali Reddy
> Fix For: 4.4.0
>
>
> OVS distributed firewall: source CIDR mismatch while populating ingress & egress network ACL. source cidr is populated in nw_dst for both ingress and egress ACL's same.
> For egress ACL it should be set as
> nw_src = tier's cidr nw_dst = source cidr in network ACL
> for ingress ACL it should be
> nw_dst = tier's cidr nw_src = source cidr in network ACL
--
This message was sent by Atlassian JIRA
(v6.2#6252)