UI: Firewall rule is lost when there is a PF rule created on a vpc network which has conserve mode on
ACS 4.23
4.23 introduced the conserve mode and firewall feature in vpc
https://docs.cloudstack.apache.org/en/4.23.0.0/adminguide/networking/virtual_private_cloud_config.html
Steps to reproduce the issue
Create a vpc offering with firewall service and conserve mode enabled
Launch a vpc network with the vpc offering
Acquire a public ip
Create a firewall rule
Create a tier and launch a vm in the tier
Create a PF rule on the same public ip to the vm
Refresh the page and navigate back and forth
The firewall rule is gone from the UI
The firewall rule exists in the Database
*************************** 100. row *************************** id: 109 uuid: c16558f6-49d2-4a08-9207-bfc805e12512 ip_address_id: 4 start_port: 22 end_port: 22 state: Active protocol: tcp purpose: Firewall account_id: 2 domain_id: 1 network_id: NULL xid: 48392cbd-e093-4d03-a2a2-269c7a5309ee created: 2026-09-11 04:44:22 icmp_code: NULL icmp_type: NULL related: NULL type: User vpc_id: 18 traffic_type: Ingress display: 1 removed: NULL *************************** 101. row *************************** id: 110 uuid: 0e5c30f7-46d7-4c0a-a724-45c93be3cacb ip_address_id: 4 start_port: 22 end_port: 22 state: Active protocol: tcp purpose: PortForwarding account_id: 2 domain_id: 1 network_id: 251 xid: 55509e55-0bde-48f7-bd7c-29026b364cbd created: 2026-09-11 04:45:17 icmp_code: NULL icmp_type: NULL related: NULL type: User vpc_id: NULL traffic_type: NULL display: 1 removed: NULL
Screen recording
The firewall rule should be shown in the UI Or it could be a limitation from the conserve mode
@harikrishna-patnala - do you plan to work on this for 24.0?
I am moving this to 25.0 due to a lack of recent activity.
Activity
RosiKyu commented on Nov 3, 2026
@harikrishna-patnala - do you plan to work on this for 24.0?
RosiKyu commented on Nov 11, 2026
I am moving this to 25.0 due to a lack of recent activity.