Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 591AD200B59 for ; Mon, 8 Aug 2016 11:41:22 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 57CB8160AB3; Mon, 8 Aug 2016 09:41:22 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 9EC03160A8F for ; Mon, 8 Aug 2016 11:41:21 +0200 (CEST) Received: (qmail 14521 invoked by uid 500); 8 Aug 2016 09:41:20 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 14499 invoked by uid 500); 8 Aug 2016 09:41:20 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 14496 invoked by uid 99); 8 Aug 2016 09:41:20 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 08 Aug 2016 09:41:20 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 982112C0D5E for ; Mon, 8 Aug 2016 09:41:20 +0000 (UTC) Date: Mon, 8 Aug 2016 09:41:20 +0000 (UTC) From: "Rajani Karuturi (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (CLOUDSTACK-9437) Outbound traffic fails to work after VR is upgraded to post 4.6+ release MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Mon, 08 Aug 2016 09:41:22 -0000 [ https://issues.apache.org/jira/browse/CLOUDSTACK-9437?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rajani Karuturi updated CLOUDSTACK-9437: ---------------------------------------- Fix Version/s: 4.9.0 > Outbound traffic fails to work after VR is upgraded to post 4.6+ release > ------------------------------------------------------------------------ > > Key: CLOUDSTACK-9437 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9437 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Affects Versions: 4.6.2, 4.7.1, 4.8.0, 4.8.1 > Reporter: Rohit Yadav > Assignee: Rohit Yadav > Priority: Blocker > Fix For: 4.9.0 > > > When CloudStack is upgraded to 4.6+ version, due to changes in script. The default iptables rules are saved at /etc/iptables/router_rules.{v4,v6} instead of the rules.{v4,v6} files. The cloud-early-config file uses the rules.v4 and rules file, which are copied from iptables-{router, etc.} templates. > When CloudStack was upgrade from 4.3 to 4.6+ version, and VR template upgraded to a 4.6 template -- the rules.v4 file was copied from iptables-router template though the configure.py uses router_rules.v4 file which does not have the FW_EGRESS_RULES chain declared. Because of this the CsNetFilters fails to add the chain. > Workaround that works -- after upgrading the router, restarting the network (without cleanup selected) fixes the issue. -- This message was sent by Atlassian JIRA (v6.3.4#6332)