1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-22 18:50:08 +03:00

B #5079: Fix IPv6 for vRouters with IP spoofing

While using the virtual router framework, it was discovered that traffic to IPv6 virtual / floating IPs was being blocked by ip6tables. Upon further investigation, IPv6 vRouter IPs were not being properly added to the ipset. This commit remediates this issue.

Signed-off-by: Kenny Van Alstyne <kenny.vanalstyne@softiron.com>
This commit is contained in:
Kenny Van Alstyne 2021-10-11 17:40:06 +02:00 committed by Ruben S. Montero
parent 278c7cb95f
commit 06c06211bd
No known key found for this signature in database
GPG Key ID: A0CEA6FA880A1D87

View File

@ -509,7 +509,7 @@ module SGIPTables
ipv6s = Array.new
[:ip6, :ip6_global, :ip6_link, :ip6_ula].each do |key|
[:ip6, :ip6_global, :ip6_link, :ip6_ula, :vrouter_ip6, :vrouter_ip6_global, :vrouter_ip6_link, :vrouter_ip6_ula].each do |key|
ipv6s << nic[key] if !nic[key].nil? && !nic[key].empty?
vars[:nics_alias].each do |nic_alias|