Load balancer security groups

[Metallion]

Summary

Load balancers should have two security groups but only have one.

Expected behaviour

The load balancers should have two security groups. One that takes care of firewall rules, and another without rules that allows ARP and IP traffic between the load balancer and its instances.

             LB - Instance group without rules
        +-----------------------------------------+
        |                                         |
        |                                         |
        |    LB firewall rules                    |
     +--|---------------------+                   |
     |  |  +----------------+ |    +----------+   |
     |  |  |                | |    |          |   |
     |  |  | Load balancer  | |    | Instance |   |
     |  |  |                | |    |          |   |
     |  |  +----------------+ |    +----------+   |
     +--|---------------------+                   |
        |                                         |
        +-----------------------------------------+

Current faulty behaviour

Currently the load balancers have only one group that handles both firewall rules and ARP/IP traffic between LB and instances. This causes all of the LB firewall rules to be applied to instances as well.

   1 group with rules and Inst-LB connection
 +-----------------------------------------+
 |                                         |
 |                                         |
 |  +----------------+      +----------+   |
 |  |                |      |          |   |
 |  | Load balancer  |      | Instance |   |
 |  |                |      |          |   |
 |  +----------------+      +----------+   |
 |                                         |
 |                                         |
 +-----------------------------------------+

Solution

Edit This line and other relevant parts of the LB api to create and maintain two groups. https://github.com/axsh/wakame-vdc/blob/master/dcmgr/lib/dcmgr/endpoints/12.03/load_balancers.rb#L112

Estimated time to fix

2 days if we don't write tests for it

[Metallion]

Has been done.