Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8098B1046B for ; Fri, 30 Aug 2013 16:04:54 +0000 (UTC) Received: (qmail 45653 invoked by uid 500); 30 Aug 2013 16:04:54 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 45610 invoked by uid 500); 30 Aug 2013 16:04:53 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 45459 invoked by uid 500); 30 Aug 2013 16:04:53 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 45341 invoked by uid 99); 30 Aug 2013 16:04:52 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 30 Aug 2013 16:04:52 +0000 Date: Fri, 30 Aug 2013 16:04:52 +0000 (UTC) From: "Prasanna Santhanam (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (CLOUDSTACK-4573) Aquire IP address above domain limit in VPC MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-4573?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Prasanna Santhanam updated CLOUDSTACK-4573: ------------------------------------------- Labels: integration-test (was: ) > Aquire IP address above domain limit in VPC > ------------------------------------------- > > Key: CLOUDSTACK-4573 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-4573 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Affects Versions: 4.1.1 > Reporter: Daan Hoogland > Labels: integration-test > > It is possible to aquire more public IP addresses than allowed according to the domain limit, the steps are as followed: > user has a limit of 2 ips > domain has a limit of 5 ips > 1) create a VPC, this will aquire a public IP address for source nat > 2) create a network (not in the VPC) and aquire an IP address, we are now at the max of two allowed public IP address > 3) create one or more networks on the VPC > 4) under IP addresses (VPC configuration) aquire IP address > We now have 3 IP addresses aquired, I tested more, I was allowed up to 7, at which time there was no more free IP addresses available in cloudstack. > conclusion: the non VPC network is correctly adhering to the domain limit, but the VPC is not, and IP addresses on the VPC are not counted for when checking the domain limit. > Strange thing is though, that cloudstack is checking the IP limit during the creation of a VPC, you cannot create a VPC when you have already reached your IP limit. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira