openstack
/
neutron
Code Issues Proposed changes
neutron/neutron
History
LIU Yulong 7ce65c9478
Local mac direct flow for non-openflow firewall 
When there is no openflow firewall, aka the ovs agent security group
is disabled or Noop/HybridIptable, this patch will introduce a different
ingress pipeline for bridge ports which will avoid ingress flood:
(1) table=0,  in_port=patch_bridge,dl_vlan=physical_vlan action=mod_vlan:local_vlan,goto:60 (original)
(2) table=60, in_port=patch_bridge                       action=goto:61                     (new)
(3) table=61, dl_dst=local_port_mac,dl_vlan=local_vlan,  action=strip_vlan,output:<ofport>  (changes)

And changes the local ports pipeline:
(1) table=0,  in_port=local_ofport                       action=goto:25                  (original)
(2) table=25, in_port=local_ofport,dl_src=local_port_mac action=goto:60                  (original)
(3) table=60, in_port=local_ofport,dl_src=local_port_mac action=local_vlan->reg6,goto:61 (changes)
(4) table=61, dl_dst=local_port_mac,reg6=local_vlan,     action=output:<ofport>          (changes)

Closes-Bug: #1884708
Closes-Bug: #1881070
Related-Bug: #1732067
Related-Bug: #1866445
Related-Bug: #1883321

Conflicts:
    neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py
    neutron/tests/unit/plugins/ml2/drivers/openvswitch/agent/openflow/native/test_br_int.py

Change-Id: Iecf9cffaf02616342f1727ad7db85545d8adbec2
(cherry picked from commit 959d8b6d73)
 		2020-11-04 16:15:37 +01:00
..
agent Merge "Do not fail deleting namespace if it does not exist" into stable/rocky 2020-09-27 11:57:17 +00:00
api [Security] fix allowed-address-pair 0.0.0.0/0 issue 2020-07-31 11:23:18 +00:00
cmd Add 'keepalived_use_no_track' config option 2020-08-25 10:27:05 +02:00
common Add trunk subports to be one of dvr serviced device owners 2020-04-06 13:28:33 +02:00
conf Add 'keepalived_use_no_track' config option 2020-08-25 10:27:05 +02:00
core_extensions Refactor duplicated implementation of _get_policy_obj 2018-06-20 09:51:02 +08:00
db Pass context in l3 flavor notifications 2020-09-02 05:47:50 +00:00
debug Fix all pep8 E265 errors 2018-04-30 16:35:52 -04:00
extensions Fix resource schemas and releated `get_sorts` test cases 2020-02-15 12:31:31 +01:00
hacking use sqla functions from neutron-lib 2018-07-25 21:04:20 +00:00
ipam Update the processing of assigned addresses when assigning addresses 2020-06-30 05:33:14 +00:00
locale Imported Translations from Zanata 2018-11-30 09:16:33 +00:00
notifiers Add config option ``http_retries`` 2020-07-09 12:17:38 +02:00
objects Improve VLAN allocations synchronization 2020-04-23 16:11:09 +00:00
pecan_wsgi Set DB retry for quota_enforcement pecan_wsgi hook 2019-12-09 12:08:47 +00:00
plugins Local mac direct flow for non-openflow firewall 2020-11-04 16:15:37 +01:00
privileged Merge "Do not fail deleting namespace if it does not exist" into stable/rocky 2020-09-27 11:57:17 +00:00
quota Set DB retry for quota_enforcement pecan_wsgi hook 2019-12-09 12:08:47 +00:00
scheduler Fetch specific columns rather than full ORM entities 2018-09-27 16:28:37 +00:00
server Re-use existing ProcessLauncher from wsgi in RPC workers 2020-02-19 07:59:06 +00:00
services Use dict .get() to avoid a KeyError in the segment plugin 2020-09-04 13:09:49 +00:00
tests Local mac direct flow for non-openflow firewall 2020-11-04 16:15:37 +01:00
__init__.py
…
_i18n.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
auth.py Use oslo.context class method to construct context object 2017-03-23 09:02:46 +00:00
manager.py Avoid loading same service plugin more than once 2019-04-12 08:33:38 +00:00
neutron_plugin_base_v2.py Do not load default service plugins if core plugin is not DB based 2017-11-09 20:34:52 +00:00
opts.py Merge "Remove deprecated cache_url" 2018-01-03 06:35:59 +00:00
policy.py List SG rules which belongs to tenant's SG 2020-01-29 08:04:16 +00:00
service.py Re-use existing ProcessLauncher from wsgi in RPC workers 2020-02-19 07:59:06 +00:00
version.py
…
worker.py replace WorkerSupportServiceMixin with neutron-lib's WorkerBase 2017-06-14 06:56:48 -06:00
wsgi.py Re-use existing ProcessLauncher from wsgi in RPC workers 2020-02-19 07:59:06 +00:00