openstack/openstack-ansible
Code Issues Proposed changes

Merge "Checksum all traffic traveling though the bridges"

Browse Source
This commit is contained in:
Jenkins 2016-09-30 18:43:57 +00:00 committed by Gerrit Code Review
commit e8daf1fb2a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tests/roles/bootstrap-host/defaults/main.yml
View File

@ -125,8 +125,8 @@ bridge_vlan_state_change_scripts: |
post-down ip link del br-vlan-veth || true post-down ip link del br-vlan-veth || true
bridge_iptables_rules: | bridge_iptables_rules: |
# To ensure ssh checksum is correct # To ensure ssh checksum is correct
up /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill up /sbin/iptables -A POSTROUTING -t mangle -p tcp -o {{ public_interface }} -j CHECKSUM --checksum-fill
down /sbin/iptables -D POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill down /sbin/iptables -D POSTROUTING -t mangle -p tcp -o {{ public_interface }} -j CHECKSUM --checksum-fill
# To provide internet connectivity to instances # To provide internet connectivity to instances
up /sbin/iptables -t nat -A POSTROUTING -o {{ public_interface }} -j MASQUERADE up /sbin/iptables -t nat -A POSTROUTING -o {{ public_interface }} -j MASQUERADE
down /sbin/iptables -t nat -D POSTROUTING -o {{ public_interface }} -j MASQUERADE down /sbin/iptables -t nat -D POSTROUTING -o {{ public_interface }} -j MASQUERADE