openstack/neutron
Code Issues Proposed changes

Merge "[OVS] Add IPv6 ICMP RA to the default ingress rules"

Browse Source
This commit is contained in:
Zuul 2022-02-14 12:11:21 +00:00 committed by Gerrit Code Review
commit fc3d3cc824
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
neutron/agent/linux/openvswitch_firewall/firewall.py
View File

@ -1345,7 +1345,12 @@ class OVSFirewallDriver(firewall.FirewallDriver):
)
def _initialize_ingress_ipv6_icmp(self, port):
for icmp_type in firewall.ICMPV6_ALLOWED_INGRESS_TYPES:
# NOTE(ralonsoh): "ICMPV6_TYPE_RA" was removed from
# "ICMPV6_ALLOWED_INGRESS_TYPES" because of a bug in the iptables
# firewall. This rule was added in "_add_ingress_ra_rule". However,
# the OVS firewall does not use port["security_group_rules"].
for icmp_type in (firewall.ICMPV6_ALLOWED_INGRESS_TYPES +
(lib_const.ICMPV6_TYPE_RA, )):
self._add_flow(
table=ovs_consts.BASE_INGRESS_TABLE,
priority=100,