[CLOUDSTACK-4913] Disable security group for bridge mode non-security group zone

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 4.2.0
• Fix Version/s: 4.2.1, 4.3.0
• Component/s: Network Controller
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Sheng Yang
• Reporter: Sheng Yang
• Created: 21/Oct/13 22:00
• Updated: 26/Nov/13 00:10
• Resolved: 25/Oct/13 01:50

Description

Currently, if XenServer is switching to bridge mode, CloudStack would automatically enable security group(apply all kinds of security group rules e.g. iptables and ebtables on it). But at the time, it wouldn't check if the zone is security group enabled or not.

If user want to use bridge mode with isolated network(RvR especially), it would have trouble because security group rules would prevent broadcast from working.

We need to stop applying security group rules if it's not security group enabled zone.