apache / apache/cloudstack

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

Offen
#14,147 0 Kommentare 0 Reaktionen 1 zugewiesene Person Beansprucht von @harikrishna-patnala Auf GitHub ansehen
bug component:networking component:vpc
Vorherrschende Sprache
Java
Sterne
3.1k
Forks
1.4k
Ø Merge
6 T. 19 Std.
Gemergte PRs (30 T.)
32

Beschreibung

### problem

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

### versions

ACS 4.23

### The steps to reproduce the bug

4.23 introduced the conserve mode and firewall feature in vpc

https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html

Steps to reproduce the issue

1. Create a vpc offering with firewall service and conserve mode enabled
2. Launch a vpc network with the vpc offering
3. Acquire a public ip
4. Create a firewall rule
5. Create a tier and launch a vm in the tier
6. Create a PF rule on the same public ip to the vm
7. Refresh the page and navigate back and forth
8. The firewall rule is gone from the UI

9. The firewall rule exists in the Database

```
*************************** 100. row ***************************
id: 109
uuid: c16558f6-49d2-4a08-9207-bfc805e12512
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: Firewall
account_id: 2
domain_id: 1
network_id: NULL
xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee
created: 2026-09-11 04:44:22
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: 18
traffic_type: Ingress
display: 1
removed: NULL
*************************** 101. row ***************************
id: 110
uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: PortForwarding
account_id: 2
domain_id: 1
network_id: 251
xid: 55509e55-0bde-48f7-bd7c-29026b364cbd
created: 2026-09-11 04:45:17
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: NULL
traffic_type: NULL
display: 1
removed: NULL
```

Screen recording

https://github.com/user-attachments/assets/5b73d8af-9d07-4cd9-9e53-d6d18e802823

### What to do about it?

The firewall rule should be shown in the UI
Or it could be a limitation from the conserve mode

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.