neutron/doc/source/contributor
Slawek Kaplonski 13aaa32f77 [OVS FW] Allow egress ICMPv6 only for know addresses
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
2021-02-27 20:10:13 +00:00
..
dashboards Add Neutron Priorities to dashboards list 2019-12-16 12:48:13 +01:00
internals [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 20:10:13 +00:00
ovn [OVN] scripts for networking-ovn code migration 2020-01-26 20:19:43 +00:00
ovn_vagrant [OVN] Merge networking-ovn vagrant into neutron 2020-02-18 17:26:15 -05:00
policies Update neutron-dynamic-routing lieutenants 2020-06-24 20:07:40 +00:00
stadium [Community goal] Add contributor and PTL guide 2020-03-03 04:43:26 +01:00
testing Convert neutron-grenade-ovn job to be zuulv3 2020-10-11 21:41:38 +02:00
alembic_migrations.rst Updates for python3.8 2020-04-28 14:03:21 -04:00
client_command_extensions.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
contribute.rst Stop testing python 2 2019-10-25 18:50:08 +00:00
contributing.rst [Community goal] Add contributor and PTL guide 2020-03-03 04:43:26 +01:00
development_environment.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
effective_neutron.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
index.rst Merge "[Community goal] Add contributor and PTL guide" 2020-03-10 19:31:23 +00:00
modules.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
neutron_api.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
upgrade_checks.rst Upgrade check command - add support for 3rd party checks 2018-12-18 11:23:03 +01:00