same as https://github.com/apache/cloudstack/pull/2990#issuecomment-440938624 ?
Andrija Panic <andrija.pa...@gmail.com> 于2019年2月28日周四 下午4:28写道: > Hi, > > ACS version, hypervisor (version) ? > > On Thu, 28 Feb 2019 at 14:58, soundar rajan <bsoundara...@gmail.com> > wrote: > > > Hi, > > > > VM outbound is working fine. Inbound is not not able to access from > > outside network > > > > Error Log > > 2019-02-28 18:12:25,112 - Failed to network rule ! > > Traceback (most recent call last): > > File > "/usr/share/cloudstack-common/scripts/vm/network/security_group.py", > > line 995, in add_network_rules > > default_network_rules(vmName, vm_id, vm_ip, vm_ip6, vmMac, vif, > brname, > > sec_ips) > > File > "/usr/share/cloudstack-common/scripts/vm/network/security_group.py", > > line 490, in default_network_rules > > if ips[0] == "0": > > IndexError: list index out of range > > 2019-02-28 18:13:16,635 - Executing command: cleanup_rules > > 2019-02-28 18:13:16,645 - Vms on the host : ['i-2-40-VM', 'i-2-90-VM', > > 'i-2-112-VM'] > > 2019-02-28 18:13:16,645 - iptables-save | grep -P '^:(?!.*-(def|eg))' | > awk > > '{sub(/^:/, "", $1) ; print $1}' | sort | uniq > > 2019-02-28 18:13:16,671 - iptables chains in the host :['BF-cloudbr0', > > 'BF-cloudbr0-IN', 'BF-cloudbr0-OUT', 'FORWARD', 'i-2-112-VM', > 'i-2-40-VM', > > 'i-2-90-VM', 'INPUT', 'OUTPUT', 'POSTROUTING', 'PREROUTING', ''] > > 2019-02-28 18:13:16,672 - grep -E '^ebtable_' /proc/modules | cut -f1 > -d' ' > > | sed s/ebtable_// > > 2019-02-28 18:13:16,693 - ebtables -t nat -L | awk '/chain:/ { > > gsub(/(^.*chain: |-(in|out|ips).*)/, ""); print $1}' | sort | uniq > > 2019-02-28 18:13:16,716 - ebtables -t filter -L | awk '/chain:/ { > > gsub(/(^.*chain: |-(in|out|ips).*)/, ""); print $1}' | sort | uniq > > 2019-02-28 18:13:16,738 - ebtables chains in the host: ['FORWARD,', > > 'INPUT,', 'OUTPUT,', ''] > > 2019-02-28 18:13:16,739 - Cleaned up rules for 0 chains > > 2019-02-28 18:13:23,959 - Executing command: get_rule_logs_for_vms > > > > It happens to particular vm > > > > Please help.. > > > > > -- > > Andrija Panić >