openstack/neutron
Code Issues Proposed changes

Merge "Deprecate ARP spoofing protection option"

Browse Source
This commit is contained in:
Jenkins
2016-02-16 09:52:59 +00:00
committed by Gerrit Code Review
parent fa9d167148 7bbacd49a4
commit 727ea09d06
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
neutron/plugins/ml2/drivers/agent/config.py
+4 -1
View File
@@ -31,6 +31,7 @@ agent_opts = [
# should be moved into a common agent config options location as part of
# the deduplication work.
cfg.BoolOpt('prevent_arp_spoofing', default=True,
deprecated_for_removal=True,
help=_("Enable suppression of ARP responses that don't match "
"an IP address that belongs to the port from which "
"they originate. Note: This prevents the VMs attached "
@@ -41,7 +42,9 @@ agent_opts = [
"added to any ports that have port security disabled. "
"For LinuxBridge, this requires ebtables. For OVS, it "
"requires a version that supports matching ARP "
"headers."))
"headers. This option will be removed in Newton so "
"the only way to disable protection will be via the "
"port security extension."))
]
cfg.CONF.register_opts(agent_opts, "AGENT")
neutron/plugins/ml2/drivers/openvswitch/agent/common/config.py
+4 -1
View File
@@ -122,6 +122,7 @@ agent_opts = [
"to respond to an ARP request locally without "
"performing a costly ARP broadcast into the overlay.")),
cfg.BoolOpt('prevent_arp_spoofing', default=True,
deprecated_for_removal=True,
help=_("Enable suppression of ARP responses that don't match "
"an IP address that belongs to the port from which "
"they originate. Note: This prevents the VMs attached "
@@ -132,7 +133,9 @@ agent_opts = [
"added to any ports that have port security disabled. "
"For LinuxBridge, this requires ebtables. For OVS, it "
"requires a version that supports matching ARP "
"headers.")),
"headers. This option will be removed in Newton so "
"the only way to disable protection will be via the "
"port security extension.")),
cfg.BoolOpt('dont_fragment', default=True,
help=_("Set or un-set the don't fragment (DF) bit on "
"outgoing IP packet carrying GRE/VXLAN tunnel.")),