neutron/neutron
Jakub Libosvar 4f6aa3ffde ovs-fw: Mark conntrack entries invalid if no rule is matched
This patch makes sure that existing connection breaks once security
group rule that allowed such connection is removed. Due to correctly
track connections on the same hypervisor, zones were changed from
per-port to per-network (based on port's vlan tag). This information is
now stored in register 6. Also there was added a test for RELATED
connections to avoid marking such connection as invalid by REPLY rules.

Closes-Bug: 1549370
Change-Id: Ibb5942a980ddd8f2dd7ac328e9559a80c05789bb
2016-03-23 16:05:49 +00:00
..
agent ovs-fw: Mark conntrack entries invalid if no rule is matched 2016-03-23 16:05:49 +00:00
api Merge "RBAC: Fix port query and deletion for network owner" 2016-03-15 08:00:42 +00:00
callbacks Add precommit_XXX event for security group and rules 2016-02-14 22:36:27 +08:00
cmd Merge "macvtap: Macvtap L2 Agent" 2016-03-01 14:49:50 +00:00
common Accept icmpv6 as protocol of SG rule for backward compatibility 2016-03-18 06:28:45 -07:00
core_extensions Objects DB api: added composite key to handle multiple primary key 2016-03-01 17:05:11 +00:00
db Merge "Add IPAllocation object to session info to stop GC" 2016-03-19 14:22:11 +00:00
debug Using LOG.warning replace LOG.warn 2016-03-10 11:02:45 -08:00
extensions Accept icmpv6 as protocol of SG rule for backward compatibility 2016-03-18 06:28:45 -07:00
hacking Using LOG.warning replace LOG.warn 2016-03-10 11:02:45 -08:00
ipam Construct exceptions before passing to retryrequest 2016-03-09 16:25:28 -08:00
locale Imported Translations from Zanata 2016-03-16 08:01:26 +00:00
notifiers Add Nova notifier hook calls to pecan 2016-03-08 04:21:31 -08:00
objects Merge "objects: fixed base to_dict implementation" 2016-03-21 16:26:46 +00:00
openstack Fix module's import order 2016-01-22 06:38:42 -08:00
pecan_wsgi Pecan: Allow unauthenticated version listing 2016-03-11 16:45:28 -08:00
plugins ovs-fw: Mark conntrack entries invalid if no rule is matched 2016-03-23 16:05:49 +00:00
quota Remove local variable named 'meh' 2016-03-18 10:10:24 -07:00
scheduler Using LOG.warning replace LOG.warn 2016-03-10 11:02:45 -08:00
server Moved CORS middleware configuration into oslo-config-generator 2016-03-01 12:21:33 -08:00
services DSCP QoS rule implementation 2016-03-18 10:07:24 +01:00
tests ovs-fw: Mark conntrack entries invalid if no rule is matched 2016-03-23 16:05:49 +00:00
__init__.py Deprecate _ builtin translation function 2015-12-06 19:39:20 +09:00
_i18n.py Move i18n to _i18n, as per oslo_i18n guidelines 2015-12-01 19:29:10 -07:00
auth.py Consume ConfigurableMiddleware from oslo_middleware 2015-10-08 17:59:43 +00:00
context.py Trival: Remove unused logging import 2015-12-26 12:49:56 +08:00
i18n.py Move i18n to _i18n, as per oslo_i18n guidelines 2015-12-01 19:29:10 -07:00
manager.py Pecan: replace dashes with underscores on controller lookup 2016-02-19 00:54:32 -08:00
neutron_plugin_base_v2.py Fix module's import order 2016-01-22 06:38:42 -08:00
opts.py macvtap: Macvtap L2 Agent 2016-02-26 15:48:01 +00:00
policy.py RBAC: Fix port query and deletion for network owner 2016-03-15 10:11:18 +08:00
service.py Check if plugin supports starting rpc listeners 2016-03-01 15:43:44 -06:00
version.py
worker.py Some minor misspellings in comment block. 2015-11-24 00:01:21 -06:00
wsgi.py Fixed typos in wsgi.py 2016-03-21 15:25:40 +08:00