[
https://issues.apache.org/jira/browse/CLOUDSTACK-79?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
John Kinsella resolved CLOUDSTACK-79.
-------------------------------------
Resolution: Fixed
I think this can be called resolved - if there's further issues, re-open and
we'll look further.
> CloudStack 3.0.4: firewall rules not restored on KVM host
> ---------------------------------------------------------
>
> Key: CLOUDSTACK-79
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-79
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: KVM, Network Controller
> Affects Versions: pre-4.0.0
> Reporter: Vladimir Ostrovsky
> Assignee: John Kinsella
> Fix For: 4.3.0
>
>
> I have CloudStack 3.0.4 with a Basic Zone defined. The Zone includes several
> KVM hosts and uses Security Groups (in other words, IPtables on the hosts) to
> isolate traffic between VMs.
> The problem: if, for some reason, IPtables on the host are flushed or the
> iptables service is restarted, the cloud-agent doesn't pull the correct rules
> from the management server and doesn't synchronize the host with Security
> Groups definitions in CloudStack. Restart of the cloud-agent service doesn't
> help as well.
> Shouldn't the agent do it?
--
This message was sent by Atlassian JIRA
(v6.1#6144)