openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit
History
Slawek Kaplonski 4b5bcff64c [OVS FW] Allow egress ICMPv6 only for know addresses 
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
 		2021-02-19 11:43:56 +01:00
..
agent [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-19 11:43:56 +01:00
api Process DHCP events in order if related 2021-02-04 15:39:10 +00:00
cmd Migrate "netstat" to oslo.privsep 2020-06-19 14:59:11 +00:00
common Rely on worker count for HashRing caching 2020-12-21 09:32:15 -05:00
conf/agent Agent common config 2017-03-15 09:52:18 -06:00
core_extensions Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
db Merge "Don't try to create default SG when security groups are disabled" 2021-02-08 10:06:49 +00:00
debug Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
extensions Merge "Fix incorrect exception catch when update floating ip port forwarding" 2021-02-09 03:38:02 +00:00
hacking Remove "six" library 2020-07-28 16:55:52 +00:00
ipam [OVN] Use new distributed device_owner for OVN distributed services 2020-07-08 13:26:35 +00:00
notifiers Add config option ``http_retries`` 2020-06-29 22:07:46 -04:00
objects Add port device profile extension 2021-01-22 16:17:30 +00:00
pecan_wsgi Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
plugins Merge "Remove rootwrap execution (1)" 2021-02-11 20:24:50 +00:00
privileged Migrate "netstat" to oslo.privsep 2020-06-19 14:59:11 +00:00
quota Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
scheduler L3 agent scheduler should return a valid index if manual scheduling 2020-06-24 15:37:23 +00:00
services Merge "Fix update of trunk subports during live migration" 2021-02-11 08:41:14 +00:00
tests Remove "six" library 2020-07-28 16:55:52 +00:00
__init__.py Don't set use_stderr to False for tests 2017-04-15 01:41:29 +00:00
_test_extension_portbindings.py Remove "six" library 2020-07-28 16:55:52 +00:00
dummy_plugin.py Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
extension_stubs.py Consume ServicePluginBase from neutron-lib 2017-03-17 12:06:57 -06:00
fake_resources.py [OVN] Fix RowNotFound exception while waiting for metadata networks 2021-02-08 12:17:17 +00:00
test_auth.py Fix context deprecation warnings 2018-02-13 15:02:49 -05:00
test_manager.py Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
test_neutron_plugin_base_v2.py Add unit test to validate non DB base core plugin can be loaded 2017-11-15 21:21:35 +00:00
test_opts.py
…
test_policy.py Fix deepcopy of the OwnerCheck objects under uwsgi 2021-02-12 10:53:26 +01:00
test_service.py Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
test_worker.py Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00
test_wsgi.py Remove "six" library 2020-07-28 16:55:52 +00:00
testlib_api.py Remove usage of six.text_type and six.string_type 2020-05-22 14:02:55 -04:00