openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit
History
Slawek Kaplonski 580e57b2ad [OVS FW] Allow egress ICMPv6 only for know addresses 
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
 		2021-02-27 20:10:39 +00:00
..
agent [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 20:10:39 +00:00
api Process DHCP events in order if related 2021-02-07 10:05:32 +00:00
cmd [OVN] Override notify_nova config in neutron-ovn-db-sync-util 2020-06-10 06:55:44 +00:00
common ovn: Always use UTC for Hash ring timestamps 2020-12-21 10:07:42 +00:00
conf/agent Agent common config 2017-03-15 09:52:18 -06:00
core_extensions Add "qos_network_policy_id" to port definition 2020-01-17 17:57:11 +00:00
db Don't try to create default SG when security groups are disabled 2021-02-08 10:32:02 +00:00
debug Remove deprecated 'external_network_bridge' option 2019-03-09 22:07:38 +00:00
extensions Merge "Fix incorrect exception catch when update floating ip port forwarding" into stable/ussuri 2021-02-09 20:21:20 +00:00
hacking Allow usage of assert_called_once method in unit tests 2020-03-02 14:17:26 +02:00
ipam IPv6 accepts first address only for routers 2020-01-12 20:39:07 +00:00
notifiers Add config option ``http_retries`` 2020-07-09 10:11:22 +00:00
objects Auto-delete dhcp ports on segment delete 2020-07-13 12:40:18 +02:00
pecan_wsgi Removing deprecated module neutron.api.versions 2018-03-28 14:15:50 +07:00
plugins [OVN] Update metadata port ony for requested subnet 2021-02-05 14:29:12 +00:00
privileged Use pyroute2 for SRIOV VF commands 2020-06-26 06:09:48 +00:00
quota use get reader/writer session from neutron-lib 2018-07-06 14:43:31 -06:00
scheduler L3 agent scheduler should return a valid index if manual scheduling 2020-06-26 09:59:27 +00:00
services Fix update of trunk subports during live migration 2021-02-11 08:56:32 +00:00
tests Remove references to unittest2 library 2020-01-14 09:03:26 +00:00
__init__.py Don't set use_stderr to False for tests 2017-04-15 01:41:29 +00:00
_test_extension_portbindings.py Remove the unit test 'test_ports_vnic_type_list' 2018-06-15 15:12:10 +00:00
dummy_plugin.py Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
extension_stubs.py Consume ServicePluginBase from neutron-lib 2017-03-17 12:06:57 -06:00
fake_resources.py Remove some unnecessary usages of verify() 2020-09-03 17:56:19 -04:00
test_auth.py Fix context deprecation warnings 2018-02-13 15:02:49 -05:00
test_manager.py Remove Neutron LBaaS 2019-09-20 07:46:06 +00:00
test_neutron_plugin_base_v2.py Add unit test to validate non DB base core plugin can be loaded 2017-11-15 21:21:35 +00:00
test_opts.py
…
test_policy.py Fix handling of network:shared field in policy module 2019-05-07 11:31:25 +02:00
test_service.py fix test nit 2019-08-04 12:31:46 +08:00
test_worker.py
…
test_wsgi.py Merge "Stop testing python 2" 2019-10-28 00:52:16 +00:00
testlib_api.py use SqlFixture and StaticSqlFixture from neutron-lib 2019-07-08 11:26:34 -06:00