On Thu, Jun 26, 2014 at 9:37 AM, Muralidhar Balcha <muralidh...@gmail.com>
wrote:
>
> Hi,
> I am using Openstack havana and I am using default security group with
> my own set of new rules added to the security group to enable ssh into
> instances. I am noticing that occasionally nova drops those
> corresponding rules from the IP tables. Also when nova api service is
> restarted, it resets the IP table rules to default rules in the
> security group.

Since you mentioned you need to add security group rule to allow ssh
access, I guess the network and security group configuration is correct.

Please check whether you have a cron job or some firewall software that
is modifying the iptables rules. Nova should not drop rules unless told
to do so.

> Is this a known issue? Does it have something to with the default
> security group. How can I make security group settings persist across
> service restarts?

Not as far as I know. Security groups are meant to be persistent by
design. You don't need to do anything.


--

YY Inc. is hiring openstack and python developers. Interested? Check
http://www.nsbeta.info/jobs

--
Thanks,
Yuanle
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to