)]}'
{"lib/ironic":[{"author":{"_account_id":7369,"name":"Sergey Skripnick","email":"sskripnick@mirantis.com","username":"redixin"},"change_message_id":"253b19771e3a75e84e16a4ef75a766be5e5ce37a","unresolved":false,"context_lines":[{"line_number":380,"context_line":"}"},{"line_number":381,"context_line":""},{"line_number":382,"context_line":"function configure_iptables {"},{"line_number":383,"context_line":"    # enable tftp natting for allowing connections to HOST_IP\u0027s tftp server"},{"line_number":384,"context_line":"    sudo modprobe nf_conntrack_tftp"},{"line_number":385,"context_line":"    sudo modprobe nf_nat_tftp"},{"line_number":386,"context_line":"    # nodes boot from TFTP and callback to the API server listening on $HOST_IP"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"AAAAXH%2F%2F8RM%3D","line":383,"updated":"2014-04-16 11:19:16.000000000","message":"It makes no sense. If tftp server works on this node then we don\u0027t need any natting.","commit_id":"5adfe32697759fe512bc1c9ab77df31ddbbd4eba"},{"author":{"_account_id":1420,"name":"Adam Gandelman","email":"adamg@ubuntu.com","username":"gandelman-a"},"change_message_id":"13d3c6b7c9d0114d42887a6d8c27181245b11e36","unresolved":false,"context_lines":[{"line_number":380,"context_line":"}"},{"line_number":381,"context_line":""},{"line_number":382,"context_line":"function configure_iptables {"},{"line_number":383,"context_line":"    # enable tftp natting for allowing connections to HOST_IP\u0027s tftp server"},{"line_number":384,"context_line":"    sudo modprobe nf_conntrack_tftp"},{"line_number":385,"context_line":"    sudo modprobe nf_nat_tftp"},{"line_number":386,"context_line":"    # nodes boot from TFTP and callback to the API server listening on $HOST_IP"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"AAAAXH%2F%2F4XQ%3D","line":383,"in_reply_to":"AAAAXH%2F%2F8RM%3D","updated":"2014-04-16 18:10:50.000000000","message":"In the case that th devstack system has a pre-existing iptables configuration in place, we need to ensure the booted VMs can reach the TFTP + API server from its neutron public network.  Example: a catchall DROP or DENY is at the bottom of the INPUT chain.  This is the case in the devstack gate VM setup and causes all provisioning to fail.","commit_id":"5adfe32697759fe512bc1c9ab77df31ddbbd4eba"}]}