summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2012-03-06 19:48:32 +0000
committerGerrit Code Review <review@openstack.org>2012-03-06 19:48:32 +0000
commit80eaaad9b3377ccc80382bf2f91ffb70b23ab106 (patch)
treeaec9d7138a13aa8bbf4df8c12e62b92e8178637b
parenta231acabb678288b1b09e8b5dbd2a8aa4e365dac (diff)
parent094c7695e8e8261c256c862eaa6774742746f3b9 (diff)
downloadnova-80eaaad9b3377ccc80382bf2f91ffb70b23ab106.tar.gz
nova-80eaaad9b3377ccc80382bf2f91ffb70b23ab106.tar.xz
nova-80eaaad9b3377ccc80382bf2f91ffb70b23ab106.zip
Merge "Ensures that we don't exceed iptables chain max"
-rwxr-xr-xnova/network/linux_net.py6
1 files changed, 5 insertions, 1 deletions
diff --git a/nova/network/linux_net.py b/nova/network/linux_net.py
index 17d1da7b3..66b792042 100755
--- a/nova/network/linux_net.py
+++ b/nova/network/linux_net.py
@@ -90,7 +90,11 @@ FLAGS = flags.FLAGS
FLAGS.register_opts(linux_net_opts)
-binary_name = os.path.basename(inspect.stack()[-1][1])
+# NOTE(vish): Iptables supports chain names of up to 28 characters, and we
+# add up to 12 characters to binary_name which is used as a prefix,
+# so we limit it to 16 characters.
+# (max_chain_name_length - len('-POSTROUTING') == 16)
+binary_name = os.path.basename(inspect.stack()[-1][1])[:16]
class IptablesRule(object):