Checksum all traffic traveling though the bridges
Some tests requiring accessing OpenStack APIs from within a VM may fail due to networking problems caused by invalid checksums. This change simply changes the checksum rules from only port 22 to all ports. Related-bug: #1619730 Co-Authored-By: Kevin Carter <kevin.carter@rackspace.com> Change-Id: If2e6180ec999f09e89944faa0a2b195dd81fba0e
This commit is contained in:
parent
8c453b8895
commit
e7f650f9fb
@ -134,8 +134,8 @@
|
||||
- item.alias is defined
|
||||
with_items: "{{ bridges }}"
|
||||
|
||||
- name: Add iptables rule to ensure ssh checksum is correct
|
||||
command: /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill
|
||||
- name: Add iptables rule to ensure traffic checksum is correct
|
||||
command: /sbin/iptables -A POSTROUTING -t mangle -p tcp -j CHECKSUM --checksum-fill
|
||||
|
||||
- name: Add iptables rule to provide internet connectivity to instances
|
||||
command: /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
|
||||
|
Loading…
Reference in New Issue
Block a user