weizhouapache commented on issue #14432: URL: https://github.com/apache/cloudstack/issues/14432#issuecomment-6232250492
thank @Tn9hia this sounds a critical issue. cc @wido > Note: VMs added to cs_notrack (any rule with protocol=all from 0.0.0.0/0) have no conntrack state, so the ESTABLISHED,RELATED rule does not match for them. That behaviour is unchanged from 4.23. Also, the conntrack*_not_needed check does not look at the rule type, so an egress all 0.0.0.0/0 rule also disables conntrack for the VM. This may deserve a separate look. this should be fixed by #14100 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
