[NETVIRT-1072] Communication between VMs not working when VMs are connected with remote SG Created: 30/Jan/18  Updated: 10/May/18  Resolved: 28/Feb/18

Status: Resolved
Project: netvirt
Component/s: General
Affects Version/s: None
Fix Version/s: Nitrogen

Type: Bug Priority: Medium
Reporter: Vinoth B Assignee: Vinoth B
Resolution: Done Votes: 0
Labels: netvirt, security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

1 ODL, (Nitrogen release)

1 control + 2 compute nodes (Pike setup)


Priority: Normal

 Description   

ODL : Nitrogen formal issue

Issue : TCP Communication not working when VMs are connected with remote SG

Steps:

  1. Create 2 SGs with Remote security group option 
       openstack security group create SG1
       openstack security group create SG2

          Delete all default rules from both SG1 and SG2

          Create below rules in SG1 and SG2
                 openstack security group rule create SG1 --ingress --protocol tcp --remote-group SG2
                 openstack security group rule create SG2 --egress --protocol tcp --remote-group SG1

   

    2. Create network and VMs for SG1 and SG2

        openstack network create l2_network_1

        openstack subnet create --network l2_network_1 --subnet-range 30.0.0.0/24 l2_subnet_1

      openstack server create --image cirros --flavor cirros --nic net-id=l2_network_1 VM1 --security-group SG2 --min 1 --max 1

      openstack server create --image cirros --flavor cirros --nic net-id=l2_network_1 VM2 --security-group SG1 --min 1 --max 1

 

   NOTE: Order of the VM should not change. First create VM for SG2 and then SG1.

Bug will reproduce in this order only.

     3. Try TCP from VM1 to VM2.

 

Expectation : TCP should successful between VM1 to VM2 (Egress -> Ingress)

Actual : TCP not working between VM1 to VM2. 

    



 Comments   
Comment by Vinoth B [ 28/Feb/18 ]

Patch pushed 

https://git.opendaylight.org/gerrit/#/c/68871/

Comment by Vinh Nguyen [ 10/May/18 ]

The bug  NETVIRT-1072 is a duplicate of NETVIRT-1123. The latter has been fixed and merged for oxygen and master.

The patch [https://git.opendaylight.org/gerrit/#/c/68871/]  is for nitrogen branch which will not be fixed and hence it has been abandoned.

Generated at Wed Feb 07 20:23:10 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.