[Openstack-docs] [openstack/nova] DocImpact review request change I7e31c25d37a5c4fd02c8238aec58a28af3fd7f6a
gerrit2 at review.openstack.org
gerrit2 at review.openstack.org
Mon Feb 11 22:28:34 UTC 2013
Hi, I'd like you to take a look at this patch for potential
DocImpact.
https://review.openstack.org/21689
Log:
commit d0c8f8a061125d6e4c3dce8f7f0741ff57a014b8
Author: Vishvananda Ishaya <vishvananda at gmail.com>
Date: Mon Feb 11 12:08:35 2013 -0800
Allow fixed to float ping with external gateway.
If you ping an a floating ip from an instance with only a fixed ip, the
traffic will be sent to the default gateway. If the default gateway has
a route to the floating ip, it will then be sent to the host of the
instance with the floating ip. The source address will be on the fixed
network, so if the floating addresses are on a different network, the
receiving host to drop the packet due to the default rp_filter.
Essentially, the route for the fixed range is on a different interface
so it the kernel assumes the packet is spoofed and drops it.
In order to fix this issue this patch adds a new config option called
force_snat_range. Traffic that originates in fixed_range and has a
destination in force_snat_range will always be routed. This forces
the packet to hit the fallback floating roule and be snatted to
routing_source_ip. This means the traffic will originate from the
proper network and the packet will make it through.
DocImpact
Fixes bug 1122335
Change-Id: I7e31c25d37a5c4fd02c8238aec58a28af3fd7f6a
More information about the Openstack-docs
mailing list