Ebtables filtering too strict (can't talk to non-ONe hosts on the same network)
|Assignee:||Jaime Melis||% Done:|
|Category:||Drivers - Network|
|Target version:||Release 5.2|
|Affected Versions:||OpenNebula 4.12, OpenNebula 4.14, OpenNebula 5.0|
Note: this is a repost of the problem mentioned here:
I use ebtables-based VNet in order to be able to force the assigned MAC address for a VM. The problem is that Ebtables.rb adds also filtering in the other direction, which drops packets which are not from the assigned MAC address range from a given VNET. This is incorrect, because the VNET can also be bridged to non-ONe infrastructure, where other MAC addresses can legally appear. In my case, the VM on an ebtables-based VNET cannot receive the DHCP reply from a non-ONe DHCP server.
My suggested fix is to omit the call to ebtables(in_rule) in /var/lib/one/remotes/vnm/ebtables/Ebtables.rb line 52 or so altogether.
The issue is present in 4.12, 4.14, and 5.0.2.