bugfix #7 vpc vr: allow servers in private gateway to reach internet via the VPC VR if it is gateway

systemvm/debian/opt/cloud/bin/cs/CsAddress.py

@@ -492,6 +492,10 @@ class CsIP:
                 self.fw.append(["nat", "front",
                                 "-A POSTROUTING -o %s -j SNAT --to-source %s" %
                                 (self.dev, self.address['public_ip'])])
+            if self.get_gateway() == self.get_ip_address():
+                # Accept packet from private gateway if VPC VR is used as gateway
+                self.fw.append(["filter", "", "-A FORWARD -s %s ! -d %s -j ACCEPT" %
+                                (self.address['network'], self.address['network'])])
 
         if self.get_type() in ["public"]:
             self.fw.append(