Adding ACL rules for one subnet in a VPC stops traffic to a VM with a Public IP in a second subnet

[PaulAngus]

ISSUE TYPE

• Bug Report

COMPONENT NAME

VPC

CLOUDSTACK VERSION

4.9

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

Whenever adding ACL rules for subnet 1 in a VPC, the VM that has Public IP in the Subnet 2 becomes unreachable. To solve the problem we need to restart the subnet 2 with clean up option.

STEPS TO REPRODUCE

EXPECTED RESULTS

ACTUAL RESULTS

[yadvr]

@PaulAngus cc @andrijapanicsb - have we tested if this affects 4.11, 4.13? If not I can run a test.

[weizhouapache]

There are many commits in master to fix issues with multiple public subnets for isolated network/vpc.
it would be better to upgrade to 4.13

[andrijapanicsb]

I believe this problem was local to 4.9 and @PaulAngus had the idea to close it (there's no internal ticket), so I say this can be closed