neutron-vpnaas/neutron_vpnaas/services/vpn/device_drivers
Christian Rohmann 38378dc1f0 Improve the reconciling for VPNaaS
* Update the router (holding RouterInfo objects) with current data
   on update / sync. Since the sync method should reconcile out of
   any state, we need to update the RouterInfo we store locally in
   the driver to ensure we have not missed e.g. a ha_state_change.

 * Consistently use RouterInfo instead of some mix of dict and Router
   and RouterInfo.

 * Ensure NAT rules are current by using a tag to clean them all and
   then re-create the currently required rules before applying them via
   iptables manager. This ensures there are no dangling rules or duplicates.

Co-Authored-By: Niklas Schwarz <niklas.schwarz@inovex.de>
Closes-Bug: https://bugs.launchpad.net/neutron/+bug/1943449

Change-Id: I378ba5a0b500110ce5f9293a885730c0a62578b0
2024-04-24 13:41:39 +02:00
..
template Add aggressive negotiation mode for ikepolicy 2020-06-04 11:25:56 -04:00
__init__.py Drop using six library 2020-01-07 06:26:03 +00:00
ipsec.py Improve the reconciling for VPNaaS 2024-04-24 13:41:39 +02:00
libreswan_ipsec.py Improve the reconciling for VPNaaS 2024-04-24 13:41:39 +02:00
ovn_ipsec.py VPNaaS support for OVN 2023-11-16 21:08:50 +01:00
strongswan_ipsec.py Add ipsec.secrets reload function to strongSwan driver 2021-03-26 07:43:08 +01:00