openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests
History
Slawek Kaplonski 580e57b2ad [OVS FW] Allow egress ICMPv6 only for know addresses 
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
 		2021-02-27 20:10:39 +00:00
..
common [Fullstack] Handle properly BrokenPipeError exception 2020-04-14 11:35:44 +00:00
contrib [OVN] Unify OVN/OVS compilation 2020-07-17 11:40:37 +00:00
etc Convert policy.json into policy-in-code 2018-12-13 20:37:53 +00:00
fullstack Limit usage of resources in the fullstack tests job 2021-01-11 11:37:52 +00:00
functional Fix deletion of rfp interfaces when router is re-enabled 2021-02-22 02:01:41 +00:00
unit [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 20:10:39 +00:00
var
…
__init__.py
…
base.py HA race condition test for DHCP scheduling 2019-11-18 14:09:32 +01:00
post_mortem_debug.py
…
tools.py Remove references to unittest2 library 2020-01-14 09:03:26 +00:00