openstack
/
neutron
Code Issues Proposed changes
neutron/doc/source/contributor/internals
History
Slawek Kaplonski 13aaa32f77 [OVS FW] Allow egress ICMPv6 only for know addresses 
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
 		2021-02-27 20:10:13 +00:00
..
images Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
ovn [ovn]: port forwarding -- move documentation to better place 2020-09-03 19:07:31 -04:00
address_scopes.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
agent_extensions.rst Track neutron-lib migration of agent extensions 2018-06-01 11:38:47 +00:00
api_extensions.rst Support Network Segment Range CRUD as extensions 2019-03-07 08:20:30 +00:00
api_layer.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
calling_ml2_plugin.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
code_profiling.rst Add profiler decorator to Neutron 2019-10-31 10:05:01 -05:00
db_layer.rst Merge "Tag mechanism supports resources with standard attribute" 2017-07-25 10:31:40 +00:00
db_models.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
dns_order.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
external_dns_integration.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
i18n.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
index.rst Merge networking-ovn documentation into neutron 2020-02-13 18:54:15 +09:00
l2_agent_extensions.rst Use same instance of iptables_manager in L2 agent and extensions 2018-01-05 11:07:32 +01:00
l2_agents.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
l3_agent_extensions.rst Add a new method get_router_info to L3 agent extension API 2017-09-08 14:48:46 +09:00
layer3.rst [OVN] Merge networking-ovn vagrant into neutron 2020-02-18 17:26:15 -05:00
linuxbridge_agent.rst Update the documentation links 2017-12-13 10:49:46 +00:00
live_migration.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
ml2_ext_manager.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
network_ip_availability.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
objects_usage.rst Add guidelines for removal of OVO version downgrades 2019-06-06 18:00:46 -04:00
openvswitch_agent.rst Deprecate use_veth_interconnection config option 2020-06-24 13:09:32 +00:00
openvswitch_firewall.rst [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 20:10:13 +00:00
ovs_vhostuser.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
plugin-api.rst Rearrange existing documentation to fit the new standard layout 2017-07-08 05:49:56 +00:00
policy.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
provisioning_blocks.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
quality_of_service.rst Remove duplicate QoS backend support table 2020-02-06 14:49:00 +01:00
quota.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
retries.rst remove neutron.db.api references 2019-03-05 09:14:50 -07:00
rpc_api.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
rpc_callbacks.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
security_group_api.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
segments.rst Add segments service plug-in devref 2017-07-28 09:54:46 -07:00
service_extensions.rst Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
services_and_agents.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
sriov_nic_agent.rst Fix URL in SR-IOV internals doc 2017-12-13 14:19:15 -06:00
tag.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-23 10:00:45 +08:00
upgrade.rst Merge networking-ovn documentation into neutron 2020-02-13 18:54:15 +09:00