[openstack-dev] [neutron] L3 agent bug - metadata nat rule removal

Maru Newby marun at redhat.com
Fri Aug 16 07:33:35 UTC 2013

Hi Nachi,

The current neutron gate failure is due to the following nat rule being cleared from the router namespace when the l3 agent syncs the router:

-A neutron-l3-agent-PREROUTING -d -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 9697

The only place the metadata nat rule appears to be applied is when a router is detected as being added by the l3 agent.

I'm unclear on whether the failure is due to not having the metadata nat rule added on sync, or if the sync is supposed to retain it.  Do you have any insight on this?

See the comments on the bug for more info: https://bugs.launchpad.net/neutron/+bug/1211829


More information about the OpenStack-dev mailing list