<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:14px">Hello,</span><br><div><span style="font-family:arial,sans-serif;font-size:14px"><br></span></div><div style>I'm trying to use security group of Quantum ovs plugin(Folsom) in CentOS 6.3 (2012.2.3-1.el6@epel).</div>
<div style><br></div><div style>Everything looks good, except security group,</div><div style><br></div><div style>and there are no error message in /var/log/nova/compute.log file.</div><div style><br></div><div style>After I created VM, I can see the bridges and interfaces have been created normally. </div>
<div style><div><br></div><div> [root@compute1 ~]# brctl show</div><div> bridge name bridge id STP enabled interfaces</div><div> br-int 0000.3eca2e714b4d no qvo756ead5d-32</div>
<div> br-tun 0000.824651aab541 no</div><div> qbr756ead5d-32 0000.ca57ea41484c no qvb756ead5d-32</div><div> vnet0</div>
<div><br></div><div style>The chain rules in filter table of iptables can reflect security group rules correctly too.</div><div style><br></div><div><div> Chain nova-compute-inst-749 (1 references)</div><div> num target prot opt source destination</div>
<div> 1 DROP all -- <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> state INVALID</div><div> 2 ACCEPT all -- <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> state RELATED,ESTABLISHED</div>
<div> 3 nova-compute-provider all -- <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a></div><div> 4 ACCEPT udp -- 10.0.0.2 <a href="http://0.0.0.0/0">0.0.0.0/0</a> udp spt:67 dpt:68</div>
<div> 5 ACCEPT all -- <a href="http://10.0.0.0/24">10.0.0.0/24</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a></div><div> 6 nova-compute-sg-fallback all -- <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a></div>
</div><div><br></div><div>Obviously, the packets do not follow these rules correctly. </div><div><br></div><div style>Please advise me how to resolve this problem.</div><div style><br></div><div style>Thanks a lot,</div><div style>
Chandler</div></div></div>