Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Thu, 18 May 2017 10:19:04 +0000 (UTC)
From: "ASF subversion and git services (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12952387.1458642583000.239687.1495102744154@Atlassian.JIRA>
In-Reply-To: <JIRA.12952387.1458642583000@Atlassian.JIRA>
References: <JIRA.12952387.1458642583000@Atlassian.JIRA> <JIRA.12952387.1458642583505@jira-lw-us.apache.org>
Subject: [jira] [Commented] (CLOUDSTACK-9317) Disabling static NAT on many
 IPs can leave wrong IPs on the router
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 18 May 2017 10:19:08 -0000


    [ https://issues.apache.org/jira/browse/CLOUDSTACK-9317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16015530#comment-16015530 ] 

ASF subversion and git services commented on CLOUDSTACK-9317:
-------------------------------------------------------------

Commit c20e0ef88f133065cabe7189d787c4d56848abb6 in cloudstack's branch refs/heads/master from Jayapal
[ https://gitbox.apache.org/repos/asf?p=cloudstack.git;h=c20e0ef ]

CLOUDSTACK-9317: Fixed disable static nat on leaving ips on interface


> Disabling static NAT on many IPs can leave wrong IPs on the router
> ------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-9317
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9317
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Management Server, Virtual Router
>    Affects Versions: 4.7.0, 4.7.1, 4.7.2
>            Reporter: Jeff Hair
>
> The current behavior of enabling or disabling static NAT will call the apply IP associations method in the management server. The method is not thread-safe. If it's called from multiple threads, each thread will load up the list of public IPs in different states (add or revoke)--correct for the thread, but not correct overall. Depending on execution order on the virtual router, the router can end up with public IPs assigned to it that are not supposed to be on it anymore. When another account acquires the same IP, this of course leads to network problems.
> The problem has been in CS since at least 4.2, and likely affects all recently released versions. Affected version is set to 4.7.x because that's what we verified against.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)