apache / apache/cloudstack

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

Đang mở
#14,147 0 bình luận 0 reaction 1 người được giao Được @harikrishna-patnala nhận Xem trên GitHub
bug component:networking component:vpc
Ngôn ngữ chính
Java
Star
3.1k
Fork
1.4k
Merge trung bình
6 ngày 19 giờ
Pull request đã merge (30 ngày)
32

Mô tả

### problem

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

### versions

ACS 4.23

### The steps to reproduce the bug

4.23 introduced the conserve mode and firewall feature in vpc

https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html

Steps to reproduce the issue

1. Create a vpc offering with firewall service and conserve mode enabled
2. Launch a vpc network with the vpc offering
3. Acquire a public ip
4. Create a firewall rule
5. Create a tier and launch a vm in the tier
6. Create a PF rule on the same public ip to the vm
7. Refresh the page and navigate back and forth
8. The firewall rule is gone from the UI

9. The firewall rule exists in the Database

```
*************************** 100. row ***************************
id: 109
uuid: c16558f6-49d2-4a08-9207-bfc805e12512
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: Firewall
account_id: 2
domain_id: 1
network_id: NULL
xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee
created: 2026-09-11 04:44:22
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: 18
traffic_type: Ingress
display: 1
removed: NULL
*************************** 101. row ***************************
id: 110
uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb
ip_address_id: 4
start_port: 22
end_port: 22
state: Active
protocol: tcp
purpose: PortForwarding
account_id: 2
domain_id: 1
network_id: 251
xid: 55509e55-0bde-48f7-bd7c-29026b364cbd
created: 2026-09-11 04:45:17
icmp_code: NULL
icmp_type: NULL
related: NULL
type: User
vpc_id: NULL
traffic_type: NULL
display: 1
removed: NULL
```

Screen recording

https://github.com/user-attachments/assets/5b73d8af-9d07-4cd9-9e53-d6d18e802823

### What to do about it?

The firewall rule should be shown in the UI
Or it could be a limitation from the conserve mode

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.