Source and classification
- Source: Confirmation of a ZNS Network Service 1.2.0 known limitation.
- Classification: Known limitation.
- Confirmation basis: Reusing the routing interface IP of the upstream Tier-0 gateway is outside the currently supported configuration.
Issue metadata
- Issue ID: ZCF-4455.
- Component/product: Network Service and DNAT.
- Status: Closed.
- Priority/severity: P1.
- Affected version: 1.2.0.
- Resolution: No fix is planned. It is recommended to adjust the VIP configuration according to the workaround.
Problem description
When creating a DNAT on Tier-1, if the VIP uses the routing interface IP of the upstream Tier-0 gateway, the rule may appear deployed, but external traffic cannot be forwarded to the VM instance. This configuration is a known limitation. It is recommended to use a dedicated VIP.
Symptoms
- The DNAT rule appears deployed.
- External TCP or UDP traffic cannot reach the VM instance through the rule.
Impact
The DNAT service is unavailable, and the displayed rule status may lead users to incorrectly conclude that the rule has taken effect.
Workaround
- Do not reuse the Tier-0 gateway routing interface IP.
- Allocate a dedicated VIP to the DNAT.
- After the change, validate TCP and UDP traffic separately.
Affected products
- Product: ZCF.
- Component: Network Service.
- Version: 1.2.0.
Fix status
- Current status: No fix is planned.
- Related patch/fix package: None.