Public bug reported:
In function 'treat_devices_added_or_updated', port not exist at 'br-int' will
be added into 'skipped_devices', and return to parent function
'process_network_ports', and 'process_network_ports' will remove these ports
from port_info['current'].
If a port updated due to 'sg_member', and the port deleted just in function
'treat_devices_added_or_updated', so the port aded into 'skipped_devices', then
it removed from port_info['current']. When next 'scan_port', the port not in
'registered_ports', so it not added into port_info['removed'], it's chains and
rules will never been removed. These waste chains and rules stay in iptables
util ovs-agent restart or compute node restart.
** Affects: neutron
Importance: Undecided
Assignee: Zhangqi Chen (chenzhangqi79)
Status: New
** Tags: sg-fw
** Changed in: neutron
Assignee: (unassigned) => Zhangqi Chen (chenzhangqi79)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1489690
Title:
neutron-openvswitch-agent leak sg iptables rules
Status in neutron:
New
Bug description:
In function 'treat_devices_added_or_updated', port not exist at 'br-int' will
be added into 'skipped_devices', and return to parent function
'process_network_ports', and 'process_network_ports' will remove these ports
from port_info['current'].
If a port updated due to 'sg_member', and the port deleted just in function
'treat_devices_added_or_updated', so the port aded into 'skipped_devices', then
it removed from port_info['current']. When next 'scan_port', the port not in
'registered_ports', so it not added into port_info['removed'], it's chains and
rules will never been removed. These waste chains and rules stay in iptables
util ovs-agent restart or compute node restart.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1489690/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp