Checksum all traffic traveling though the bridges

Some tests requiring accessing OpenStack APIs from within a VM may fail
due to networking problems caused by invalid checksums. This change
simply changes the checksum rules from only port 22 to all ports.

Related-bug: #1619730
Co-Authored-By: Kevin Carter <kevin.carter@rackspace.com>

Change-Id: If2e6180ec999f09e89944faa0a2b195dd81fba0e
This commit is contained in:
Jimmy McCrory 2016-10-03 13:48:59 -07:00
parent 8c453b8895
commit e7f650f9fb

View File

@ -134,8 +134,8 @@
- item.alias is defined
with_items: "{{ bridges }}"
- name: Add iptables rule to ensure ssh checksum is correct
command: /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill
- name: Add iptables rule to ensure traffic checksum is correct
command: /sbin/iptables -A POSTROUTING -t mangle -p tcp -j CHECKSUM --checksum-fill
- name: Add iptables rule to provide internet connectivity to instances
command: /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE