René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CS4.22.0 vROUTER ACLs Feature is non RFC compliant applied to Internal Interface","articleBody":"### problem\n\nCS 4.22.0\nHost Ubuntu 22.4 KVM\nvRouter on VPC ACLs\n\nThis VPC ACL feature is beyond good, it's awesome. However @weizhouapache with all the love I have for the team. That's not right, ACL should be applied to the edge - and we know that should not be to interpretation, and many think are just Cisco best practices -  we should have a feature to select WAN-side, LAN-side or named Edge-side, Internal-Side which seems are more contemporary names.\n\n- RFC 2827\n- RFC 3704\n\nSuggestion: if decided to make it RF-ish. To make easy the transition for existing systems, the updated feature will apply to LAN-side (internal-side) by default.\n\n### versions\n\nCS 4.22.0\nHost Ubuntu 22.4 KVM\nrunning vRouter with 8CPUs and 8GRAM, oversubscription is  1:1 for all systems.\n\n### The steps to reproduce the bug\n\n1. Create a VPC\n2. Add the custom ACL with ingress only\n3. the ACL does not filter the traffic, as is applied to the vRouter LAN AKA Internal interface.\n\n\n### What to do about it?\n\n_No response_","author":{"url":"https://github.com/tatay188","@type":"Person","name":"tatay188"},"datePublished":"2026-05-27T14:12:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6},"url":"https://github.com/13266/cloudstack/issues/13266"}