openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit/agent
History
Bernard Cafarelli 6124f60297 Switch isolated metadata proxy to bind to 169.254.169.254 
Currently the metadata proxy binds to default 0.0.0.0, which does not
add any advantage (metadata requests are not sent to random IP
addresses), and may allow access to cloud information from
third parties.

This changes the generated configuration to bind to METADATA_DEFAULT_IP
address instead.

This is not enabled in other metadata proxy configuration (in the L3
agent), as this would require net.ipv4.ip_nonlocal_bind everywhere
(currently only enabled for DVR) or transparent mode in haproxy (which
requires net.ipv4.ip_nonlocal_bind anyway)

Changed set_ip_nonlocal_bind_for_namespace() to support setting the
value in both the given and root namespace correctly, since it was
only used from inside the neutron codebase according to codesearch.

Change-Id: I388391cf697dade1a163d15ab568b33134f7b2d9
Co-Authored-By: Andrey Arapov <andrey.arapov@nixaid.com>
Closes-Bug: #1745618
 		2019-01-30 14:17:43 +00:00
..
common Revert "Skip ovsdb_monitor events for ports with ofport=-1" 2019-01-20 10:02:07 +00:00
dhcp Switch isolated metadata proxy to bind to 169.254.169.254 2019-01-30 14:17:43 +00:00
l2 Clear residual qos rules after l2-agent restarts. 2019-01-18 02:24:56 +00:00
l3 Update neutron files for new over-indentation hacking rule (E117) 2019-01-29 15:36:20 -05:00
linux Switch isolated metadata proxy to bind to 169.254.169.254 2019-01-30 14:17:43 +00:00
metadata Switch isolated metadata proxy to bind to 169.254.169.254 2019-01-30 14:17:43 +00:00
ovsdb Add native OVSDB implementation for bridge monitor 2018-12-03 16:09:06 +00:00
windows Fix neutron-openvswitch-agent Windows support 2018-07-18 14:41:21 +03:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
test_agent_extensions_manager.py Refactoring config options for l2 agent ext opts 2016-11-21 19:45:04 +00:00
test_resource_cache.py Merge "Fix race condition with enabling SG on many ports at once" 2018-01-27 10:36:37 +00:00
test_rpc.py Integration of Port Binding Level OVO 2018-09-17 07:00:45 +00:00
test_securitygroups_rpc.py Use constant IP_VERSION_4/6 in unit tests 2018-08-27 21:45:39 +00:00