apache / apache/cloudstack

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

Abierto
#14,147 0 comentarios 0 reacciones 1 asignado Reclamado por @harikrishna-patnala Ver en GitHub
bug component:networking component:vpc
Lenguaje dominante
Java
Estrellas
3.1k
Forks
1.4k
Merge medio
6 d 19 h
PR fusionados (30 d)
32

Descripción

### problem

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

### versions

ACS 4.23

### The steps to reproduce the bug

4.23 introduced the conserve mode and firewall feature in vpc

https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html

Steps to reproduce the issue

1. Create a vpc offering with firewall service and conserve mode enabled
2. Launch a vpc network with the vpc offering
3. Acquire a public ip
4. Create a firewall rule
5. Create a tier and launch a vm in the tier
6. Create a PF rule on the same public ip to the vm
7. Refresh the page and navigate back and forth
8. The firewall rule is gone from the UI

9. The firewall rule exists in the Database

```
*************************** 100. row ***************************
id: 109
uuid: c16558f6-49d2-4a08-9207-bfc805e12512
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: Firewall
account_id: 2
domain_id: 1
network_id: NULL
xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee
created: 2026-09-11 04:44:22
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: 18
traffic_type: Ingress
display: 1
removed: NULL
*************************** 101. row ***************************
id: 110
uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: PortForwarding
account_id: 2
domain_id: 1
network_id: 251
xid: 55509e55-0bde-48f7-bd7c-29026b364cbd
created: 2026-09-11 04:45:17
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: NULL
traffic_type: NULL
display: 1
removed: NULL
```

Screen recording

https://github.com/user-attachments/assets/5b73d8af-9d07-4cd9-9e53-d6d18e802823

### What to do about it?

The firewall rule should be shown in the UI
Or it could be a limitation from the conserve mode

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.