[CLOUDSTACK-9878] Remote Access VPN that losing connection when new network configs are introduced

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 4.10.0.0
• Fix Version/s: 4.10.0.0
• Component/s: Network Controller
• Security Level: Public (Anyone can view this level - this is the default.)
• Environment: CentOS 7.2+KVM
• Assignee: Will Stevens
• Reporter: haijiao
• Created: 14/Apr/17 15:19
• Updated: 09/May/17 05:56
• Resolved: 09/May/17 05:56

Description

We built and tested the ACS 4.10 from the latest master (Apr.7,2017)

Our environment is,

• ACS: 4.10.0.0-SNAPSHOT
• Management Server: Centos7.2 1151
• Host: Centos7.2 1151
• System VM: systemvm64template-master-4.10.0-kvm.qcow2.bz2
• Network: Isolated Network
• Network Offering: Offering for Isolated networks with SourceNat service enabled

We can successfully setup remote access VPN and it works as expected. However, once we take any network changes below, the remote access VPN connection will be immediately disconnected.

• Update firewall rules (add/change)
• Update port forwarding
• Update LB
• Add one more VPN account

Is there some configuration we missed ? Or it's due to the new
VPN component (StrongSWAN) introduced in 4.10 ?