Hi All,

I'm looking for a way to set port_filter flag to False for port binding. Is there a way to do this in IceHouse or in current Juno code? I use devstack with the default ML2 plugin and configuration.

According to this guide (http://docs.openstack.org/api/openstack-network/2.0/content/binding_ext_ports.html) it should be done via binding:profile but it gets only recorded in the dictionary of binding:profile and doesn't get reflected in vif_details as supposed to.

I tried to find any code in Neutron that can potentially do this transferring from incoming binding:profile into binding:vif_details and found none.

I'd be very grateful if anybody can point me in the right direction.

And by the by the reason I'm trying to do this is because I want to use one instance as NAT for another one in private subnet. As a result of ping from private instance to NAT instance the reply gets Dropped by the security rule in iptables on TAP interface of NAT instance because the source is different from the NAT instance IP. So I suppose that port_filter is responsible for this behavior and will remove this restriction in iptables.

Best regards,
  Alex Levine

OpenStack-dev mailing list

Reply via email to