[jira] [Updated] (CLOUDSTACK-79) CloudStack 3.0.4: firewall rules not restored on KVM host

["Abhinandan Prateek (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-79?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Abhinandan Prateek updated CLOUDSTACK-79:
-----------------------------------------

    Fix Version/s:     (was: 4.2.1)
                   4.3.0

> CloudStack 3.0.4: firewall rules not restored on KVM host
> ---------------------------------------------------------
>
>                 Key: CLOUDSTACK-79
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-79
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: KVM, Network Controller
>    Affects Versions: pre-4.0.0
>            Reporter: Vladimir Ostrovsky
>            Assignee: John Kinsella
>             Fix For: 4.3.0
>
>
> I have CloudStack 3.0.4 with a Basic Zone defined. The Zone includes several KVM hosts and uses Security Groups (in other words, IPtables on the hosts) to isolate traffic between VMs.
> The problem: if, for some reason, IPtables on the host are flushed or the iptables service is restarted, the cloud-agent doesn't pull the correct rules from the management server and doesn't synchronize the host with Security Groups definitions in CloudStack. Restart of the cloud-agent service doesn't help as well.
> Shouldn't the agent do it?



--
This message was sent by Atlassian JIRA
(v6.1#6144)