weizhouapache commented on PR #9552:
URL: https://github.com/apache/cloudstack/pull/9552#issuecomment-2812883784

   tested this PR with a VPC 
   - source nat: 10.0.53.6
   - other public ips on same subnet: 10.0.53.20, 10.0.53.3
   - public ips on different subnet: 10.0.64.110/111/112
   
   
   main difference with iptables
   ```
    -A POSTROUTING -o eth1 -j SNAT --to-source 10.0.53.6       < ========= same 
(with Source NAT IP)
   
   --A POSTROUTING -o eth2 -j SNAT --to-source 10.0.53.6       < ========== 
removed
   
   +-A POSTROUTING -o eth1 -j SNAT --to-source 10.0.53.20    <========= new 
rules (with other public IPs)
   +-A POSTROUTING -o eth1 -j SNAT --to-source 10.0.53.3
   +-A POSTROUTING -o eth2 -j SNAT --to-source 10.0.64.111
   +-A POSTROUTING -o eth2 -j SNAT --to-source 10.0.64.110
   +-A POSTROUTING -o eth2 -j SNAT --to-source 10.0.64.112
   ```
   
   
   the issue #8562 fixed by #8599 will come back
   they are two different cases. it looks difficult to make both work ...
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to