openstack/neutron
Code Issues Proposed changes
OpenStack Networking (Neutron)
21,050 Commits 10 Branches 89 Tags 1,010 MiB
Python 99.7%
Shell 0.3%
0fce3ca2c1
Go to file
Jens Harbott 0fce3ca2c1 Secure dnsmasq process against external abuse 
Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e
2018-11-28 15:49:25 -05:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack Fix devstack/lib/ovs to run with Fedora 28 2018-08-31 15:01:05 +01:00
doc Merge "supported_vnic_type configurable for ovs" 2018-10-24 04:00:36 +00:00
etc Merge "Remove _migrate_python_ns_metadata_proxy_if_needed method" 2018-08-21 21:21:50 +00:00
neutron Secure dnsmasq process against external abuse 2018-11-28 15:49:25 -05:00
playbooks/legacy Revert "Add openstack/placement as a required project for neutron-grenade*" 2018-10-24 08:46:21 -04:00
rally-jobs [rally] Port custom plugins to use proper code 2018-05-18 00:25:35 +03:00
releasenotes Secure dnsmasq process against external abuse 2018-11-28 15:49:25 -05:00
tools Update abandon_old_reviews script to check Zuul votes 2018-08-30 10:18:48 +02:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Switch to stestr 2018-06-02 13:03:33 +02:00
.gitreview Fix .gitreview to not point at a branch 2015-08-17 13:51:51 -06:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Disable some pylint checks 2018-10-03 08:41:56 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2017-09-12 14:20:12 -06:00
.zuul.yaml Merge "Revert "Add openstack/placement as a required project for neutron-grenade*"" 2018-10-24 21:54:37 +00:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
CONTRIBUTING.rst Update link for contribution 2017-08-31 16:44:51 +02:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
lower-constraints.txt Merge "Upgrade pylint to a version that works with python3" 2018-10-05 17:14:15 +00:00
README.rst Add release notes link in README 2018-07-10 15:40:00 +07:00
requirements.txt Merge "Fix best_match() deprecation warning" 2018-10-04 23:33:23 +00:00
setup.cfg Introduce L3 agent extension for SNAT logging 2018-10-17 10:25:55 +07:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Upgrade pylint to a version that works with python3 2018-10-04 18:03:25 +00:00
TESTING.rst doc: Small clearances for fullstack testing 2018-09-05 09:40:07 +02:00
tox.ini Fix flake8 N534 untranslated exception message 2018-10-19 15:46:04 -04:00

README.rst

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst