Ticket #3587 (closed defect: Fixed)
On restart, Zenoss attempts to discover networks that have zAutoDiscover==False
| Reported by: | ian | Owned by: | ian |
|---|---|---|---|
| Priority: | 1 - Blocker | Milestone: | zenoss-2.3 |
| Component: | ZenModel | Version: | 2.2.3 |
| Keywords: | zenoss-2.2.4-verified | Cc: | thomasb6f@… |
| Reviewed: | yes | Community Patch Attached: | |
| Deployed @ Customer: | Installer: | ||
| Microrelease Target: | Specific ZenPack: | ||
| Microrelease Status: | Documentation Note?: | Not required | |
| Regression: |
Description
A limitation for my project is that Zenoss after a restart is always trying to discover the networks. My client has a class B (e.g 134.111.X.X) and many sites (Chile, Germany) and different usages (isolated network, etc...).
To reproduce : * Add a network 134.111.10.X/24 set auto-discovery to true. * Add a network 134.111.0.0/16 set auto-discovery to false. * Restart zenoss, wait a bit. * 134.171.[1-254].X/24 arer added without my explicit permission.
This result is ICMP storms and it's not good for network health.
I reproduced this on two x86_64 systems running stack 2.2.3. I think the safest wait is to block outgoing ICMP with iptables for the moment.