neutron

Hyper-V agent cannot add ICMP security group rules

Bug #1299159 reported by Claudiu Belu
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Undecided
Claudiu Belu
neutron 2014.2 "juno"
Icehouse
Fix Released
Undecided
Unassigned
neutron 2014.1.2

Bug Description

The Hyper-V agent throws exceptions each time it tries to add a security group rule which has ICMP as protocol.

This is caused by the fact that Hyper-V Msvm_EthernetSwitchPortExtendedAclSettingData can accept only TCP and UDP as text as protocols. Any other protocol must be a string of the protocol number.

Source: http://technet.microsoft.com/en-us/library/dn464289.aspx

Agent log:
http://pastebin.com/HwrczsfX

See original description
Claudiu Belu (cbelu)
Changed in neutron:
assignee: nobody → Claudiu Belu (cbelu)
Claudiu Belu (cbelu)
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/84464

Changed in neutron:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/84464
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=f56972193be903c67cd54c57bcc2becf6222aced
Submitter: Jenkins
Branch: master

commit f56972193be903c67cd54c57bcc2becf6222aced
Author: Claudiu Belu <email address hidden>
Date: Tue Apr 1 17:36:50 2014 +0300

    Fixes Hyper-V agent security group ICMP rules

    Converts ICMP protocol to the equivalent protocol number.
    Adds default ICMP reject rules.
    Adds default ANY protocol rules if the rule does not
    contain any protocol.

    Closes-Bug: #1299159
    Change-Id: Iff51a58fdb532eda0fe7a63abf96004ee74bb073

Changed in neutron:
status: In Progress → Fix Committed
Revision history for this message
Openstack Gerrit (openstack-gerrit) wrote : Fix proposed to neutron (stable/icehouse)

Fix proposed to branch: stable/icehouse
Review: https://review.openstack.org/92169

Thierry Carrez (ttx)
Changed in neutron:
milestone: none → juno-1
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/icehouse)

Reviewed: https://review.openstack.org/92169
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=6fe25962893f60610525e7ef252c3c5a34108bc6
Submitter: Jenkins
Branch: stable/icehouse

commit 6fe25962893f60610525e7ef252c3c5a34108bc6
Author: Claudiu Belu <email address hidden>
Date: Tue Apr 1 17:36:50 2014 +0300

    Fixes Hyper-V agent security group ICMP rules

    Converts ICMP protocol to the equivalent protocol number.
    Adds default ICMP reject rules.
    Adds default ANY protocol rules if the rule does not
    contain any protocol.

    Closes-Bug: #1299159
    Change-Id: Iff51a58fdb532eda0fe7a63abf96004ee74bb073
    (cherry picked from commit f56972193be903c67cd54c57bcc2becf6222aced)

tags: added: in-stable-icehouse
Thierry Carrez (ttx)
Changed in neutron:
milestone: juno-1 → 2014.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.