Slawek Kaplonski 1e220d7136 [OVS FW] Clean conntrack entries with mark == CT_MARK_INVALID ... In case when security group is removed from port, connections established to/from port which were hitting some of the removed SG rules will be marked with CT_MARK_INVALID in the conntrack table. Due to that such existing connections will be stopped. But then if SG will be added again to the port, those conntrack entries marked as invalid will not be removed and those hang connections will not be revived. To fix that, this patch adds deletion of the conntrack entries marked with CT_MARK_INVALID and related to the port of which SG are updated/added. Closes-Bug: #1915530 Change-Id: I84718b8ac4d8d6e39426e1c4485c2d7fe28185dd		2021-02-18 09:14:23 +01:00
..
__init__.py	Open vSwitch conntrack based firewall driver	2016-02-16 16:47:21 +00:00
test_firewall.py	[OVS FW] Clean conntrack entries with mark == CT_MARK_INVALID	2021-02-18 09:14:23 +01:00
test_iptables.py	Remove rootwrap execution (1)	2021-02-06 16:22:43 +00:00
test_rules.py	Remove the dependency on the "mock" package	2020-04-28 18:05:37 -04:00