Details
-
Bug
-
Status: Resolved
-
Resolution: Done
-
Boron
-
None
-
None
-
Operating System: All
Platform: All
-
7340
Description
Overview:
---------
During tests I did in multi-tenanted environment (2 or 3 tenants), using same subnets/IPs for different VMs in different tenants causes rules to be overwritten in table 28
Steps:
------
1) Created 1 network, subnet, router, VM, Floating IP x.x.x.x (from public network) allocated to VM internal IP - in tenant 1
Details:
Network: type: vxlan, segmentation ID: 1111, not external, subnet - 1.1.1.0/24
VM: IP: 1.1.1.11
2) Connectivity check to floating ip x.x.x.x
3) Created 1 network, subnet, router, VM, Floating IP x.x.x.y (from public network) allocated to VM internal IP - in tenant 2
Details:
Network: type: vxlan, segmentation ID: 111, not external, subnet - 1.1.1.0/24
VM: IP: 1.1.1.11
4) Connectivity check to floating ip x.x.x.x and x.x.x.y
Expected results:
-----------------
- Connectivity to both floating IPs exist
Actual result:
--------------
- Connectivity to 1st floating IP do not longer exist
Investigation:
--------------
- We observed that the flows in table 28 for the floating IP x.x.x.y (2nd) overwrite the flows that were there for floating IP x.x.x.x (1st) instead of appending new flows.
This was caused because the key used in the model was including the internal IP (which is common to the two VMs in the multi-tenanted environment) instead of the floating IP which is unique.