UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

Offen
#14,147 0 Kommentare 0 Reaktionen 1 zugewiesene Person Auf GitHub ansehen

@harikrishna-patnala arbeitet bereits daran.

Seit 11.9.2026.

Bewertung

Dieses Issue wurde noch nicht bewertet.

Beschreibung

bug component:networking component:vpc
problem

UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on

versions

ACS 4.23

The steps to reproduce the bug

4.23 introduced the conserve mode and firewall feature in vpc

https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html

Steps to reproduce the issue

  1. Create a vpc offering with firewall service and conserve mode enabled

  2. Launch a vpc network with the vpc offering

  3. Acquire a public ip

  4. Create a firewall rule

  5. Create a tier and launch a vm in the tier

  6. Create a PF rule on the same public ip to the vm

  7. Refresh the page and navigate back and forth

  8. The firewall rule is gone from the UI

  9. The firewall rule exists in the Database

*************************** 100. row ***************************
           id: 109
         uuid: c16558f6-49d2-4a08-9207-bfc805e12512
ip_address_id: 4
   start_port: 22
     end_port: 22
        state: Active
     protocol: tcp
      purpose: Firewall
   account_id: 2
    domain_id: 1
   network_id: NULL
          xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee
      created: 2026-09-11 04:44:22
    icmp_code: NULL
    icmp_type: NULL
      related: NULL
         type: User
       vpc_id: 18
 traffic_type: Ingress
      display: 1
      removed: NULL
*************************** 101. row ***************************
           id: 110
         uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb
ip_address_id: 4
   start_port: 22
     end_port: 22
        state: Active
     protocol: tcp
      purpose: PortForwarding
   account_id: 2
    domain_id: 1
   network_id: 251
          xid: 55509e55-0bde-48f7-bd7c-29026b364cbd
      created: 2026-09-11 04:45:17
    icmp_code: NULL
    icmp_type: NULL
      related: NULL
         type: User
       vpc_id: NULL
 traffic_type: NULL
      display: 1
      removed: NULL

Screen recording

https://github.com/user-attachments/assets/5b73d8af-9d07-4cd9-9e53-d6d18e802823

What to do about it?

The firewall rule should be shown in the UI
Or it could be a limitation from the conserve mode

Vorherrschende Sprache
Java
Sterne
3.1k
Forks
1.4k
Ø Merge
7 T. 5 Std.
Gemergte PRs (30 T.)
28

Beitragsleitfaden

Beitragsleitfaden öffnen

Erste Schritte

  1. Lesen Sie das ganze Issue und danach den Beitragsleitfaden des Projekts.
  2. Schreiben Sie ins Issue, dass Sie es übernehmen — das erspart doppelte Arbeit.
  3. Forken Sie das Repository und arbeiten Sie in einem Branch.
  4. Öffnen Sie einen Pull Request, der die Issue-Nummer nennt.

Mehr aus apache/cloudstack

Alle Issues in apache/cloudstack

Ähnliche Issues

Weitere Issues zu Java

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.