x
/
fuel-plugin-xenserver
Code Issues Proposed changes

Accept all packets from HIMN 

In MOS 8.0, compute node will drop packets at input stage thus
the packets forwarded from HIMN will not get a chance to be
masqueraded which will happen at postrouting stage. It is the
reason why Dom0 fails to connect to Cinder's iScSi target.

This change will make sure all packets flown from HIMN will be
accepted to prevent similar situations from happening.

Change-Id: Icd427ba1e133a55204af6b5a8ad203b73f5f5ad6
(cherry picked from commit 1a148cde1d23790322775d2d3db8c76df4076eec)
This commit is contained in:
John Hua 2016-04-28 10:45:28 +08:00 committed by Bob Ball
parent 46e58c0fd4
commit 11398e2bdb
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
deployment_scripts/compute_post_deployment.py
View File

@ -271,6 +271,7 @@ def forward_from_himn(eth):
'-i', eth, '-o', endpoint_name,
'-j', 'ACCEPT')
execute('iptables', '-A', 'INPUT', '-i', eth, '-j', 'ACCEPT')
execute('iptables', '-t', 'filter', '-S', 'FORWARD')
execute('iptables', '-t', 'nat', '-S', 'POSTROUTING')
execute('service', 'iptables-persistent', 'save')