Commit Graph

105 Commits (cfc77635060b8b09944df02c7039dc4a708a76f4)

Author SHA1 Message Date
Rodolfo Alonso Hernandez cfc7763506 [OVS][FW] Initialize ConjIdMap._max_id depending on the current OFs 1 year ago
Slawek Kaplonski ac474307d3 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2 years ago
Slawek Kaplonski 580e57b2ad [OVS FW] Allow egress ICMPv6 only for know addresses 2 years ago
Slawek Kaplonski 817c5f2249 [OVS FW] Clean conntrack entries with mark == CT_MARK_INVALID 2 years ago
Marc Gariepy b84dbd68e8 Fix losses of ovs flows when ovs is restarted 2 years ago
Hang Yang c720f26b6a Fix OVS conjunctive IP flows cleanup 2 years ago
Moshe Levi d865165cc8 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 2 years ago
Rodolfo Alonso Hernandez ed22f7a2ff [OVS][FW] Remote SG IDs left behind when a SG is removed 2 years ago
Yang JianFeng 7b41d63f8f Make DVR router support FLAT network for ovs-agent 2 years ago
LIU Yulong 00298fe6e8 [Security] fix allowed-address-pair 0.0.0.0/0 issue 3 years ago
Hang Yang 6dbba8d5ce Check SG members instead of ports to skip flow update 3 years ago
LIU Yulong efa8dd0895 Add accepted egress direct flow 3 years ago
Slawek Kaplonski b01e0c2aa9 [OVS FW] Clean port rules if port not found in ovsdb 3 years ago
Yang Li 5cb0ff418a Add more condition to check sg member exist 3 years ago
Oleg Bondarev e801159003 Handle OVSFWPortNotFound and OVSFWTagNotFound in ovs firewall 3 years ago
Nate Johnston 4b67a06403 Log OVS firewall conjunction creation 3 years ago
LIU Yulong aa58542e82 Add VLAN type conntrack direct flow 3 years ago
Nate Johnston fb859966f7 OVS flows for custom ethertypes must be on EGRESS 3 years ago
Rodolfo Alonso Hernandez ae1d36fa9d Improve "OVSFirewallDriver.process_trusted_ports" 3 years ago
Oleg Bondarev da539da378 Yield control to other greenthreads while processing trusted ports 3 years ago
Nate Johnston 9ea6a61665 Add custom ethertype processing 3 years ago
Yang Li 82782d3763 Make sure the port still in port map when prepare_port_filter 4 years ago
Boden R 9bbe9911c4 remove neutron.common.constants 4 years ago
Boden R f92a726c4d use callback payloads for AGENT OVS_RESTARTED events 4 years ago
Brian Haley eaf990b2bc Fix pep8 E128 warnings in non-test code 4 years ago
Brian Haley 18c578aa10 Fix KeyError in OVS firewall 4 years ago
Lajos Katona 22f55822aa Catch OVSFWTagNotFound in update_port_filter 4 years ago
Slawek Kaplonski 2ba9e95156 Reinitialize ovs firewall after ovs-vswitchd restart 4 years ago
Brian Haley fc95db987d Fix flake8 N534 untranslated exception message 4 years ago
Thomas Morin 9feb5db61c ovs fw: apply the NORMAL action on egress traffic in a single table 4 years ago
Nguyen Phuong An ced78395a7 Fix no ACCEPT event can get for security group logging 4 years ago
Brian Haley 7cfdf4aa81 Fix all pep8 E129 errors 5 years ago
Jakub Libosvar 75d28cbc73 fullstack: Migration from iptables_hybrid to openvswitch 5 years ago
Jakub Libosvar 8b2c40366b ovs-fw: Apply openflow rules immediately during update 5 years ago
Jakub Libosvar 6f7ba76075 ovs-fw: Fix firewall blink 5 years ago
Jakub Libosvar 3327db80be ovs-fw: Clear conntrack information before egress pipeline 5 years ago
Jakub Libosvar b3b2df142e ovsfw: Use bundle when adding security group rules 5 years ago
Boden R d55e824310 use EGRESS_DIRECTION and INGRESS_DIRECTION from neutron-lib 5 years ago
Sławek Kapłoński 02cc3ca307 ovsfw: Update SG rules even if OVSFW Port is not found 5 years ago
Jakub Libosvar 37aba76275 ovs-fw: Don't modify passed rules to update 5 years ago
david shaughnessy c135c5672a broken HybridIptablesHelper function override 5 years ago
Nguyen Phuong An 7bd8b37e38 [log] ovs fw logging implementation 5 years ago
Jakub Libosvar ed57c3de42 ovsfw: Don't create rules if updated port doesn't exist 5 years ago
Frank Wang e2ebc7d7f8 [trivial fix]fix typos in neutron 5 years ago
Jakub Libosvar 29080700eb ovsfw: Create tables for further consumption 5 years ago
Zachary 364e5db586 ovs-fw: catches exception from ovsdb 5 years ago
chenghuiyu 46613e946b Remove unused variables ‘LOG' 5 years ago
IWAMOTO Toshihiro 4ac4c22a64 ovsfw: Use multiple priorities in RULES_*_TABLE 5 years ago
IWAMOTO Toshihiro 237ec30ca9 ovsfw: Merge multiple conjunction flows 5 years ago
Hunt Xu 675ecb8190 Fix typo: allow_address_pair -> allowed_address_pair 5 years ago