static nat fails to apply on KVM host if public interface is tagged

[Kuang-Ching Wang <ku...@gmail.com>]

Hi, I wonder if anyone knows whether the following is a known issue.  We confirmed that, when the public network is set to untagged on the KVM host, static nat works fine.  If its tagged, instead, static nat will fail and the following errors are seen on the management server, as well as on the router VM.  We have been testing with the latest 4.5 branch.

2014-12-01 13:00:52,837 DEBUG [c.c.a.t.Request] (AgentManager-Handler-5:null) Seq 1-1401463909042378656: Processing:  { Ans: , MgmtId: 159303462780468, via: 1, Ver: v1, Flags: 110, [{"com.cloud.agent.api.StartAnswer":{"vm":{"id":25,"name":"r-25-VM","type":"DomainRouter","cpus":1,"minSpeed":500,"maxSpeed":500,"minRam":134217728,"maxRam":134217728,"arch":"x86_64","os":"Debian GNU/Linux 5.0 (64-bit)","platformEmulator":"Debian GNU/Linux 5","bootArgs":" vpccidr=10.5.0.0/16 domain=cs2cloud.internal dns1=8.8.8.8 template=domP name=r-25-VM eth0ip=169.254.0.24 eth0mask=255.255.0.0 type=vpcrouter disable_rp_filter=true","enableHA":true,"limitCpuUse":false,"enableDynamicallyScaleVm":false,"vncPassword":"iwbdWIYd7YFjm7I/yftabw==","vncAddr":"192.168.6.5","params":{},"uuid":"8abe6cc2-2591-44e9-8e1c-3bcaa4dd6b21","disks":[{"data":{"org.apache.cloudstack.storage.to.VolumeObjectTO":{"uuid":"b4940121-26c9-47cc-a8ce-2c76965c698d","volumeType":"ROOT","dataStore":{"org.apache.cloudstack.storage.to.PrimaryDataStoreTO":{"uuid":"04ce9d6b-8200-3b3b-a9c6-b310e818d082","id":1,"poolType":"NetworkFilesystem","host":"192.168.6.3","path":"/export/primary","port":2049,"url":"NetworkFilesystem://192.168.6.3/export/primary/?ROLE=Primary&STOREUUID=04ce9d6b-8200-3b3b-a9c6-b310e818d082"}},"name":"ROOT-25","size":309625344,"path":"b4940121-26c9-47cc-a8ce-2c76965c698d","volumeId":25,"vmName":"r-25-VM","accountId":2,"format":"QCOW2","provisioningType":"THIN","id":25,"deviceId":0,"hypervisorType":"KVM"}},"diskSeq":0,"path":"b4940121-26c9-47cc-a8ce-2c76965c698d","type":"ROOT","_details":{"managed":"false","storagePort":"2049","storageHost":"192.168.6.3","volumeSize":"309625344"}}],"nics":[{"deviceId":0,"networkRateMbps":-1,"defaultNic":false,"pxeDisable":true,"nicUuid":"0f763465-116c-4858-a2d6-5b5e21c6e8a8","uuid":"0013db3e-6ef6-4da3-a0d5-7e4b93eb7b17","ip":"169.254.0.24","netmask":"255.255.0.0","gateway":"169.254.0.1","mac":"0e:00:a9:fe:00:18","broadcastType":"LinkLocal","type":"Control","isSecurityGroupEnabled":false}]},"result":true,"wait":0}},{"com.cloud.agent.api.check.CheckSshAnswer":{"result":true,"wait":0}},{"com.cloud.agent.api.GetDomRVersionAnswer":{"templateVersion":"Cloudstack Release 4.6.0 Tue Nov 25 23:00:42 UTC 2014","scriptsVersion":"d4fd057dee85da7ea01fcc97816f9603\n","result":true,"details":"Cloudstack Release 4.6.0 Tue Nov 25 23:00:42 UTC 2014&d4fd057dee85da7ea01fcc97816f9603\n","wait":0}},{"com.cloud.agent.api.PlugNicAnswer":{"result":true,"details":"success","wait":0}},{"com.cloud.agent.api.routing.GroupAnswer":{"results":["10.8.73.67 - vpc_ipassoc - success: Device \"ethnull\" does not exist.\nCannot find device \"ethnull\"\narping: unknown iface ethnull\narping: unknown iface ethnull\nError: argument \"Table_ethnull\" is wrong: \"table\" value is invalid\n\nError: argument \"Table_ethnull\" is wrong: \"table\" value is invalid\n\nRTNETLINK answers: No such process\n","10.8.73.67 - vpc_privategateway - success: iptables: No chain/target/match by that name.\n"],"result":true,"wait":0}},{"com.cloud.agent.api.Answer":{"result":true,"details":"iptables: Bad rule (does a matching rule exist in that chain?).\niptables: No chain/target/match by that name.\n","wait":0}},{"com.cloud.agent.api.NetworkUsageAnswer":{"routerName":"r-25-VM","bytesSent":0,"bytesReceived":0,"result":true,"wait":0}}] }