Open Stack

Hi Nachi,

The current neutron gate failure is due to the following nat rule being cleared from the router namespace when the l3 agent syncs the router:

-A neutron-l3-agent-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 9697

The only place the metadata nat rule appears to be applied is when a router is detected as being added by the l3 agent.

I'm unclear on whether the failure is due to not having the metadata nat rule added on sync, or if the sync is supposed to retain it.  Do you have any insight on this?

See the comments on the bug for more info: https://bugs.launchpad.net/neutron/+bug/1211829


m.