neutron/doc/source
Slawek Kaplonski 13aaa32f77 [OVS FW] Allow egress ICMPv6 only for know addresses
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
2021-02-27 20:10:13 +00:00
..
_static Neutron Feature Classification 2017-03-15 23:31:58 +00:00
admin [OVN] Fix inconsistent IGMP configuration 2020-11-30 10:38:05 +00:00
cli Remove "vf_management" and "vf_extended_management" checks 2020-07-27 10:47:16 +00:00
configuration Granular metering data in neutron-metering-agent 2020-09-04 09:20:54 -03:00
contributor [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 20:10:13 +00:00
feature_classification Replace support matrix ext with common library 2020-01-17 11:10:17 +01:00
install Update cirros image to cirros-0.5.1-x86_64 globally 2020-07-07 22:06:39 +00:00
ovn ovn: Document gap about IPv6 PD in OVN 2020-09-17 14:47:43 +02:00
reference PDF documentation build 2019-08-26 02:50:58 +09:00
_intro.rst PDF documentation build 2019-08-26 02:50:58 +09:00
conf.py Switch to newer openstackdocstheme and reno versions 2020-05-20 22:06:45 +02:00
index.rst Merge networking-ovn documentation into neutron 2020-02-13 18:54:15 +09:00
pdf-index.rst Merge networking-ovn documentation into neutron 2020-02-13 18:54:15 +09:00