[Openstack-operators] Help on Iptables in Openstack

Joseph Breu breu at breu.org
Fri Mar 28 22:28:02 UTC 2014


iptables changes are made by neutron and a variety of other services and those should not be modified by hand.  They will be re-created when certain actions are triggered in OpenStack.

If you are trying to change the iptables rules for a launched instance that should be done with security groups and not by direct manipulation of the iptables rules.

Maybe you could describe that it is you are trying to do and we can provide guidance?

Joseph Breu
Deployment Engineer
Rackspace Private Cloud

On Mar 28, 2014, at 3:10 PM, shiva m <anjaneya2 at gmail.com> wrote:

> Hi Razique,
> Thank you for your reply.  You mean iptables-save as configuration? So, if i edit a chain in iptables-save and re-store back, does added rule gets effect?
> I did a iptables -F on a chain and all iptable rules for that neutron chain got deleted. But the moment I restart VM or launch a new VM, deleted chain rules got reloaded into iptables.
> Thanks,
> Shiva
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20140328/9deb5768/attachment.html>

More information about the OpenStack-operators mailing list