openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/plugins/ml2/drivers/openvswitch/agent
History
sridhargaddam 1776511429 Add IPv6 Address Resolution protection 
Similar to IPv4 arp protection support, this patch adds the necessary OVS
rules to prevent ports attached to agent from sending any icmpv6 neighbor
advertisement messages that contain an IPv6 address not belonging to the port.

For details please refer to "Figure 3. Attack against IPv6 Address Resolution"
http://www.cisco.com/web/about/security/intelligence/ipv6_first_hop.html

DocImpact
SecurityImpact

Closes-Bug: #1491690
Change-Id: I1f8311f1b9ae1be02afde3e9078e49c6da373a88
 		2015-09-15 12:24:10 +00:00
..
common ovs agent resync may miss port remove event 2015-09-08 13:24:52 +00:00
extension_drivers Fix the low level OVS driver to really do egress 2015-08-12 09:37:45 +00:00
openflow Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00
xenapi OVS-agent: Introduce Ryu based OpenFlow implementation 2015-09-02 14:05:18 +09:00
__init__.py Restructure agent code in preparation for decomp 2015-06-26 15:06:49 +00:00
main.py OVS-agent: Introduce Ryu based OpenFlow implementation 2015-09-02 14:05:18 +09:00
ovs_dvr_neutron_agent.py Remove an unused DVR function 2015-09-10 17:30:55 +09:00
ovs_neutron_agent.py Add IPv6 Address Resolution protection 2015-09-15 12:24:10 +00:00