OpenStack Networking (Neutron)
Go to file
Rodolfo Alonso Hernandez 0a931391d8 Make ARP protection commands compatible with "ebtables-nft"
"nftables" compatible binary, "ebtables-nft", is not 100% compatible
with the legacy API, as reported in LP#1922892.

This patch fixes the following issues when using "ebtables-nft" (while
keeping compatibility with legacy binary):
- When a new chain is created, a default DROP rule is added at the end
  of the chain (append). This will prevent the error code 4 when the
  chain is listed.
- The chain rules are added at the begining of the chain (insert),
  before the default DROP rule. This will prioritize the port rules.
- The MAC rules are cleaned before the new ones are added. That will
  prevent the deletion of any new needed rule, now added after the
  deletion.
- The "ebtables" command will retry on error code 4. This is the
  error returned when the chains are listed and no rule is present
  in a new created chain (reporeted in LP#1922892).

This code is backwards compatible, that means it works with the legacy
"ebtables" binary; this is currently installed in the Neutron CI [1].
In order to test with the new binary, "ebtables-nft", two new CI jobs
are added to the periodic queue [2].

[1]1ad9ca56b0/roles/legacy_ebtables/tasks/main.yaml
[2]https://review.opendev.org/c/openstack/neutron/+/785144

Closes-Bug: #1922892
Related-Bug: #1508155

Change-Id: I9463b000f6f63e65aaf91d60b30f6c92c01e3baf
2021-04-09 13:30:39 +00:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
devstack [OVN] security group logging support (2 of 2) 2021-03-02 10:48:23 -05:00
doc Add grafana dashboards step to major release checklist 2021-03-30 17:18:43 +02:00
etc Remove rootwrap execution (6) 2021-03-05 10:03:22 +00:00
neutron Make ARP protection commands compatible with "ebtables-nft" 2021-04-09 13:30:39 +00:00
playbooks Merge "Convert neutron-grenade-ovn job to be zuulv3" 2020-10-11 16:50:14 +00:00
rally-jobs [ci] Fix several rally task arguments 2020-05-06 14:56:27 +03:00
releasenotes Update master for stable/wallaby 2021-03-26 15:27:20 +00:00
roles [OVN] Use the OVN DevStack module 2020-08-26 10:09:28 +01:00
tools migration: Remove crudini when migrating tunnels 2021-03-24 18:03:20 +01:00
vagrant/ovn Fix local neutron folder path in ovn/sparse/Vagrantfile 2020-11-03 17:02:34 +01:00
zuul.d Merge "Add Python3 xena unit tests" 2021-03-29 22:06:18 +00:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Add etc/neutron/*.sample files to be ignored by git 2019-12-12 12:38:24 +01:00
.gitreview OpenDev Migration Patch 2019-04-19 19:38:27 +00:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Remove "six" library 2020-07-28 16:55:52 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
bindep.txt include python36-devel in bindep, for tests 2020-10-03 21:58:20 +10:00
CONTRIBUTING.rst [Community goal] Add contributor and PTL guide 2020-03-03 04:43:26 +01:00
HACKING.rst Remove "six" library 2020-07-28 16:55:52 +00:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
lower-constraints.txt Merge "Bump neutron-lib to 2.10.1" 2021-03-24 01:23:40 +00:00
plugin.spec Add OVN migration OSP 16.2 option 2021-01-24 17:18:55 +02:00
README.rst Start README.rst with a better title 2019-11-19 17:42:57 +01:00
requirements.txt Merge "Bump neutron-lib to 2.10.1" 2021-03-24 01:23:40 +00:00
setup.cfg Add port device profile extension 2021-01-22 16:17:30 +00:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Follow-up: Move linters dependencies to tox.ini 2021-01-07 04:26:07 +09:00
TESTING.rst [Docs] Guide about running and debugging tempest tests 2021-01-07 21:36:42 +01:00
tox.ini Merge "Follow-up: Move linters dependencies to tox.ini" 2021-03-08 17:44:12 +00:00

OpenStack Neutron

image

Neutron is an OpenStack project to provide "network connectivity as a service" between interface devices (e.g., vNICs) managed by other OpenStack services (e.g., Nova).

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute, please read the CONTRIBUTING.rst file.