OpenStack Networking (Neutron)
Go to file
Brian Haley 08108c4199 Move Linuxbridge ARP spoofing to nat table PREROUTING chain
It was found that adding ebtables rules to the filter table
FORWARD chain could be vulnerable to a DoS attack.  Moving
to the nat table PREROUTING chain should mitigate this as
it is consulted prior to allowing the frame in.

In order to make this work with upgrades, had to make the code
detect and remove any old rules that might still exist in
the filter table.  That can be removed after a cycle.

Added some unit tests in addition to the existing functional
tests.

Change-Id: I87852b21db4404c58c83789cc267812030ac7d5f
Closes-bug: #1732294
2018-01-31 11:31:14 -05:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack Merge "devstack: Adapt to lib/neutron" 2017-09-06 01:06:14 +00:00
doc Merge "Remove DocImpact info from contributor docs" 2017-11-12 01:56:38 +00:00
etc Fix typo "extention" -> "extension" 2017-11-09 07:05:56 -05:00
neutron Move Linuxbridge ARP spoofing to nat table PREROUTING chain 2018-01-31 11:31:14 -05:00
playbooks Added zuulv3 jobs for testing neutron tempest plugin 2017-11-13 09:30:36 +05:30
rally-jobs Fix the link to the rally docs in README.rst 2017-09-26 21:11:03 +00:00
releasenotes Merge "Renamed ovs_vsctl_timeout into ovsdb_timeout" 2017-11-13 09:25:20 +00:00
tools Allow fullstack to operate on dhclient-script for OpenSUSE 2017-09-19 15:50:57 -04:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Added zuulv3 jobs for testing neutron tempest plugin 2017-11-13 09:30:36 +05:30
.gitreview Fix .gitreview to not point at a branch 2015-08-17 13:51:51 -06:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Update pylint disable list to pass pylint 1.7.1 checks 2017-06-08 09:49:46 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
.testr.conf Allow more time for DB migration tests 2016-09-21 20:54:41 -04:00
.zuul.yaml Added zuulv3 jobs for testing neutron tempest plugin 2017-11-13 09:30:36 +05:30
CONTRIBUTING.rst Update link for contribution 2017-08-31 16:44:51 +02:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
README.rst Correct tag link in README 2017-08-03 09:47:25 +08:00
TESTING.rst docs: clarify wording about how to use advanced glance image 2017-08-01 08:56:45 -07:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
requirements.txt Updated from global requirements 2017-11-02 13:49:39 +00:00
setup.cfg [log]: implement logging agent extension 2017-10-11 16:04:14 +07:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Updated from global requirements 2017-09-13 12:55:07 +00:00
tox.ini add doc link validation to release checklist and tox 2017-09-21 15:24:03 -06:00

README.rst

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst