Slawek Kaplonski 7b1f0dd1ae [OVS FW] Allow egress ICMPv6 only for know addresses ... Before that patch it was possible to send ICMPv6 packets like e.g. neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY, neutron_lib.constants.ICMPV6_TYPE_RS, neutron_lib.constants.ICMPV6_TYPE_NS, neutron_lib.constants.ICMPV6_TYPE_NA And that could cause some security issues as instance could advertise that it owns IPv6 address which really don't belong to it. Now rules in table=71 which allows that traffic are "per mac/ipaddress" and are allowed only for fixed ips allocated to port and port's allowed_address_pairs. Conflicts: neutron/agent/linux/openvswitch_firewall/firewall.py neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py Closes-Bug: #1902917 Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c (cherry picked from commit 4b5bcff64c)		2021-02-27 21:17:05 +01:00
..
_static	Neutron Feature Classification	2017-03-15 23:31:58 +00:00
admin	DVR: Ignore DHCP port during DVR host query	2020-01-04 08:27:57 +08:00
cli	import content from cli-reference in openstack-manuals	2017-07-10 18:06:29 +00:00
configuration	Add auto-generated config reference	2017-07-30 21:14:40 +00:00
contributor	[OVS FW] Allow egress ICMPv6 only for know addresses	2021-02-27 21:17:05 +01:00
ext	Add project links to feature classification matrix	2017-07-25 16:28:59 -07:00
feature_classification	Update the documentation links	2017-12-13 10:49:46 +00:00
install	neutron.conf needs lock_path set for router to operate	2019-04-16 14:27:33 +00:00
conf.py	add doc link validation to release checklist and tox	2017-09-21 15:24:03 -06:00
index.rst	Replace http with https for doc links	2017-11-01 22:10:51 +00:00