87 Commits (580e57b2ad07d268067b2043fd1f5b33bd8f785e)

Author SHA1 Message Date
Slawek Kaplonski 580e57b2ad [OVS FW] Allow egress ICMPv6 only for know addresses 7 months ago
Marc Gariepy b84dbd68e8 Fix losses of ovs flows when ovs is restarted 8 months ago
Hang Yang c720f26b6a Fix OVS conjunctive IP flows cleanup 10 months ago
Moshe Levi d865165cc8 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 1 year ago
Rodolfo Alonso Hernandez ed22f7a2ff [OVS][FW] Remote SG IDs left behind when a SG is removed 1 year ago
Yang JianFeng 7b41d63f8f Make DVR router support FLAT network for ovs-agent 1 year ago
Hang Yang 6dbba8d5ce Check SG members instead of ports to skip flow update 2 years ago
LIU Yulong efa8dd0895 Add accepted egress direct flow 2 years ago
Slawek Kaplonski b01e0c2aa9 [OVS FW] Clean port rules if port not found in ovsdb 2 years ago
Yang Li 5cb0ff418a Add more condition to check sg member exist 2 years ago
Oleg Bondarev e801159003 Handle OVSFWPortNotFound and OVSFWTagNotFound in ovs firewall 2 years ago
Nate Johnston 4b67a06403 Log OVS firewall conjunction creation 2 years ago
LIU Yulong aa58542e82 Add VLAN type conntrack direct flow 2 years ago
Nate Johnston fb859966f7 OVS flows for custom ethertypes must be on EGRESS 2 years ago
Rodolfo Alonso Hernandez ae1d36fa9d Improve "OVSFirewallDriver.process_trusted_ports" 2 years ago
Oleg Bondarev da539da378 Yield control to other greenthreads while processing trusted ports 2 years ago
Nate Johnston 9ea6a61665 Add custom ethertype processing 2 years ago
Yang Li 82782d3763 Make sure the port still in port map when prepare_port_filter 2 years ago
Boden R 9bbe9911c4 remove neutron.common.constants 3 years ago
Boden R f92a726c4d use callback payloads for AGENT OVS_RESTARTED events 3 years ago
Brian Haley eaf990b2bc Fix pep8 E128 warnings in non-test code 3 years ago
Lajos Katona 22f55822aa Catch OVSFWTagNotFound in update_port_filter 3 years ago
Slawek Kaplonski 2ba9e95156 Reinitialize ovs firewall after ovs-vswitchd restart 3 years ago
Brian Haley fc95db987d Fix flake8 N534 untranslated exception message 3 years ago
Thomas Morin 9feb5db61c ovs fw: apply the NORMAL action on egress traffic in a single table 3 years ago
Nguyen Phuong An ced78395a7 Fix no ACCEPT event can get for security group logging 3 years ago
Brian Haley 7cfdf4aa81 Fix all pep8 E129 errors 3 years ago
Jakub Libosvar 8b2c40366b ovs-fw: Apply openflow rules immediately during update 3 years ago
Jakub Libosvar 6f7ba76075 ovs-fw: Fix firewall blink 4 years ago
Jakub Libosvar 3327db80be ovs-fw: Clear conntrack information before egress pipeline 4 years ago
Jakub Libosvar b3b2df142e ovsfw: Use bundle when adding security group rules 4 years ago
Boden R d55e824310 use EGRESS_DIRECTION and INGRESS_DIRECTION from neutron-lib 4 years ago
Sławek Kapłoński 02cc3ca307 ovsfw: Update SG rules even if OVSFW Port is not found 4 years ago
Jakub Libosvar 37aba76275 ovs-fw: Don't modify passed rules to update 4 years ago
Nguyen Phuong An 7bd8b37e38 [log] ovs fw logging implementation 5 years ago
Jakub Libosvar ed57c3de42 ovsfw: Don't create rules if updated port doesn't exist 4 years ago
Frank Wang e2ebc7d7f8 [trivial fix]fix typos in neutron 4 years ago
Jakub Libosvar 29080700eb ovsfw: Create tables for further consumption 4 years ago
Zachary 364e5db586 ovs-fw: catches exception from ovsdb 4 years ago
IWAMOTO Toshihiro 4ac4c22a64 ovsfw: Use multiple priorities in RULES_*_TABLE 4 years ago
IWAMOTO Toshihiro 237ec30ca9 ovsfw: Merge multiple conjunction flows 4 years ago
Hunt Xu 675ecb8190 Fix typo: allow_address_pair -> allowed_address_pair 4 years ago
Jakub Libosvar 9d74de162a ovs-fw: Remove iptables rules on hybrid ports 4 years ago
IWAMOTO Toshihiro effa12889b ovsfw: Fix port_ranges handling 4 years ago
Inessa Vasilevskaya 7322bd6efb Make code follow log translation guideline 5 years ago
Jakub Libosvar 1d80c960f6 ovs-fw: Handle only known trusted ports 4 years ago
jufeng b7892b16b2 ovsfw: fix allowed_address_pairs MAC issue 4 years ago
Jakub Libosvar 6370a04710 ovsfw: Fix overlapping MAC addresses on integration bridge 4 years ago
Thomas Morin f2caa7c823 OVS firewall: do strip_vlan in TRANSIENT_TABLE 5 years ago
Jakub Libosvar d559cd53e8 ovs-fw: Use TRANSIENT table for traffic classification 4 years ago