ISSUE TYPE

• Bug Report

COMPONENT NAME

VR

CLOUDSTACK VERSION

4.13.1

CONFIGURATION

advanced networking
multiple public interfaces

OS / ENVIRONMENT

CentOS7 +KVM +Bridge

SUMMARY

When a VR has public IPs on multiple interfaces, a static NAT rule which is not on the first public interface will have outgoing traffic originating from the Source NAT IP

Same as #3168 fault description
However, my mangle / PREROUTING firewall rule status is already NEW MARK set 0x67

STEPS TO REPRODUCE

1. Assign public IP from different subnet to VR (so that VR gets eth3 created).
2. Deploy a VM on this network
3. Create static NAT rule for this new public IP to the new VM
4. Run curl ip.sb inside the VM

EXPECTED RESULTS

Output should be the Static NAT IP

ACTUAL RESULTS

Output is the Source NAT IP