apache / apache/cloudstack

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

オープン
#14,147 コメント 0 件 リアクション 0 件 担当者 1 名 @harikrishna-patnala が担当を希望しています GitHub で見る
bug component:networking component:vpc
主要言語
Java
スター
3.1k
フォーク
1.4k
平均マージ
6日 19時間
マージ済み PR(30日)
32

説明

### problem

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

### versions

ACS 4.23

### The steps to reproduce the bug

4.23 introduced the conserve mode and firewall feature in vpc

https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html

Steps to reproduce the issue

1. Create a vpc offering with firewall service and conserve mode enabled
2. Launch a vpc network with the vpc offering
3. Acquire a public ip
4. Create a firewall rule
5. Create a tier and launch a vm in the tier
6. Create a PF rule on the same public ip to the vm
7. Refresh the page and navigate back and forth
8. The firewall rule is gone from the UI

9. The firewall rule exists in the Database

```
*************************** 100. row ***************************
id: 109
uuid: c16558f6-49d2-4a08-9207-bfc805e12512
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: Firewall
account_id: 2
domain_id: 1
network_id: NULL
xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee
created: 2026-09-11 04:44:22
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: 18
traffic_type: Ingress
display: 1
removed: NULL
*************************** 101. row ***************************
id: 110
uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: PortForwarding
account_id: 2
domain_id: 1
network_id: 251
xid: 55509e55-0bde-48f7-bd7c-29026b364cbd
created: 2026-09-11 04:45:17
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: NULL
traffic_type: NULL
display: 1
removed: NULL
```

Screen recording

https://github.com/user-attachments/assets/5b73d8af-9d07-4cd9-9e53-d6d18e802823

### What to do about it?

The firewall rule should be shown in the UI
Or it could be a limitation from the conserve mode

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。