neutron/neutron/tests/unit
Slawek Kaplonski 2231a9d40f [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Conflicts:
    neutron/agent/linux/openvswitch_firewall/firewall.py

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
2021-05-19 11:35:21 +02:00
..
agent [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-05-19 11:35:21 +02:00
api DHCP notification optimization 2021-04-23 10:03:16 +00:00
cmd Migrate "netstat" to oslo.privsep 2021-02-25 20:59:01 +00:00
common Merge "Make NeutronOvsdbIdl singleton" into stable/train 2020-11-03 11:16:12 +00:00
conf/agent Agent common config 2017-03-15 09:52:18 -06:00
core_extensions remove neutron.common.exceptions 2019-02-01 14:35:00 -07:00
db DHCP notification optimization 2021-04-23 10:03:16 +00:00
debug Remove deprecated 'external_network_bridge' option 2019-03-09 22:07:38 +00:00
extensions Fix incorrect exception catch when update floating ip port forwarding 2021-05-09 03:31:50 +00:00
hacking remove string use of neutron.common.rpc 2019-02-08 09:40:39 -07:00
ipam Start enforcing E125 flake8 directive 2019-07-19 23:39:41 -04:00
notifiers Add config option ``http_retries`` 2020-07-09 10:11:43 +00:00
objects Auto-delete dhcp ports on segment delete 2020-07-13 12:43:04 +02:00
pecan_wsgi Removing deprecated module neutron.api.versions 2018-03-28 14:15:50 +07:00
plugins Call install_ingress_direct_goto_flows() when ovs restarts 2021-03-31 01:19:37 +00:00
privileged Migrate "netstat" to oslo.privsep 2021-02-25 20:59:01 +00:00
quota use get reader/writer session from neutron-lib 2018-07-06 14:43:31 -06:00
scheduler Revert "DVR: Remove control plane arp updates for DVR" 2021-03-09 13:10:59 +00:00
services trivial: Make driver_controller's _attrs_to_driver py3 compatible 2021-05-05 06:58:01 +00:00
tests Start enforcing E125 flake8 directive 2019-07-19 23:39:41 -04:00
__init__.py Don't set use_stderr to False for tests 2017-04-15 01:41:29 +00:00
_test_extension_portbindings.py Remove the unit test 'test_ports_vnic_type_list' 2018-06-15 15:12:10 +00:00
dummy_plugin.py Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
extension_stubs.py Consume ServicePluginBase from neutron-lib 2017-03-17 12:06:57 -06:00
test_auth.py Fix context deprecation warnings 2018-02-13 15:02:49 -05:00
test_manager.py Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
test_neutron_plugin_base_v2.py Add unit test to validate non DB base core plugin can be loaded 2017-11-15 21:21:35 +00:00
test_opts.py
test_policy.py Fix handling of network:shared field in policy module 2019-05-07 11:31:25 +02:00
test_service.py fix test nit 2019-08-04 12:31:46 +08:00
test_worker.py Move AgentStatusCheckWorker to PeriodicWorker 2016-11-17 15:31:19 -08:00
test_wsgi.py Start enforcing E125 flake8 directive 2019-07-19 23:39:41 -04:00
testlib_api.py use SqlFixture and StaticSqlFixture from neutron-lib 2019-07-08 11:26:34 -06:00