neutron/neutron/agent
Jens Harbott 0fce3ca2c1 Secure dnsmasq process against external abuse
Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e
2018-11-28 15:49:25 -05:00
..
common Fix flake8 N534 untranslated exception message 2018-10-19 15:46:04 -04:00
dhcp Event driven periodic resync task for DHCP agents 2018-10-26 01:24:24 +08:00
l2 Reduce qos rpc times on the ovs-agent side 2018-08-16 15:59:32 +03:00
l3 Merge "Fix flake8 N534 untranslated exception message" 2018-10-23 16:20:52 +00:00
linux Secure dnsmasq process against external abuse 2018-11-28 15:49:25 -05:00
metadata Allow Ipv6 addresses for nova_metadata_host 2018-10-11 02:07:05 +00:00
ovsdb Remove deprecated vsctl ovsdb_interface api 2018-10-11 14:59:34 -04:00
windows Windows OVS: minimize polling 2018-08-14 09:54:07 +03:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
_topics.py Add binding_deactivate method to Linux bridge agent 2018-07-14 16:46:01 -05:00
agent_extensions_manager.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
dhcp_agent.py Enable mutable config in Neutron 2018-03-21 20:35:19 +00:00
firewall.py use EGRESS_DIRECTION and INGRESS_DIRECTION from neutron-lib 2018-02-23 10:36:36 -07:00
l3_agent.py Enable mutable config in Neutron 2018-03-21 20:35:19 +00:00
metadata_agent.py Remove deprecated cache_url 2017-11-10 00:47:19 -05:00
resource_cache.py Fix flake8 N534 untranslated exception message 2018-10-19 15:46:04 -04:00
rpc.py shim neutron rpc with neutron-lib 2018-08-22 11:20:53 -06:00
securitygroups_rpc.py Fix all pep8 E129 errors 2018-05-03 13:44:04 +09:00