From e7f650f9fb745b45b79c75cb032b57398cc055fb Mon Sep 17 00:00:00 2001 From: Jimmy McCrory Date: Mon, 3 Oct 2016 13:48:59 -0700 Subject: [PATCH] Checksum all traffic traveling though the bridges Some tests requiring accessing OpenStack APIs from within a VM may fail due to networking problems caused by invalid checksums. This change simply changes the checksum rules from only port 22 to all ports. Related-bug: #1619730 Co-Authored-By: Kevin Carter Change-Id: If2e6180ec999f09e89944faa0a2b195dd81fba0e --- test-prepare-host.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test-prepare-host.yml b/test-prepare-host.yml index 0bc7fb71..993ac3f8 100644 --- a/test-prepare-host.yml +++ b/test-prepare-host.yml @@ -134,8 +134,8 @@ - item.alias is defined with_items: "{{ bridges }}" - - name: Add iptables rule to ensure ssh checksum is correct - command: /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill + - name: Add iptables rule to ensure traffic checksum is correct + command: /sbin/iptables -A POSTROUTING -t mangle -p tcp -j CHECKSUM --checksum-fill - name: Add iptables rule to provide internet connectivity to instances command: /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE