neutron/neutron/agent
Daniel Alvarez 676a3ebe2f Disable RA and IPv6 forwarding on backup HA routers
Neutron does not disable ipv6 forwarding for HA routers and it's
enabled by default in all router namespaces. For ipv6, this means
that it will automatically join the following groups:

* link-local all-routers multicast group (ff02::2)
* interface-local all routers multicast group (ff01::2)
* site-local all routers multicast group (ff05::2))

As a side effect it will answer to multicast listener queries, thus
causing external switch to learn its MAC address and disrupting traffic
to the master instance.

This patch will enable ipv6 forwarding on the gateway interface only
for master instances and disable it otherwise to fix the issue.

Also, the accept_ra procfs entry was enabled under certain
circumstances but it wasn't disabled otherwise. This patch, will
disable RA on the gateway interface for non master instances.

Closes-Bug: #1667756

Change-Id: I9bc890b43f750cad68fc67f4c79f1426c3506863
2017-03-17 15:06:08 +00:00
..
common Merge "Switch ns-metadata-proxy to haproxy" 2017-03-14 17:32:13 +00:00
dhcp Spin off context module 2017-03-06 16:25:29 +00:00
l2 Refactors QosAgentDriver 2017-01-03 04:34:44 -08:00
l3 Disable RA and IPv6 forwarding on backup HA routers 2017-03-17 15:06:08 +00:00
linux Disable RA and IPv6 forwarding on backup HA routers 2017-03-17 15:06:08 +00:00
metadata Merge "Switch ns-metadata-proxy to haproxy" 2017-03-14 17:32:13 +00:00
ovsdb Set OVS inactivity_probe to vsctl_timeout when adding manager 2017-03-08 20:10:35 +00:00
windows Add IPLink class to Windows ip_lib implementation 2017-01-17 17:39:38 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
agent_extension.py Generalize agent extension mechanism 2016-07-19 13:45:22 +00:00
agent_extensions_manager.py Refactoring config options for l2 agent ext opts 2016-11-21 19:45:04 +00:00
dhcp_agent.py Switch ns-metadata-proxy to haproxy 2017-03-08 15:20:50 +00:00
firewall.py Use ICMPV6_TYPE_* constants from neutron-lib 2016-05-28 07:53:35 -07:00
l3_agent.py Switch ns-metadata-proxy to haproxy 2017-03-08 15:20:50 +00:00
metadata_agent.py Refactoring agent metadata config 2016-11-21 19:44:49 +00:00
rpc.py Remove logging import unused 2017-02-15 14:01:04 +07:00
securitygroups_rpc.py Delete conntrack when remote ipset member removed 2016-11-29 16:19:03 +00:00