openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit/agent
History
Slawek Kaplonski 7b1f0dd1ae [OVS FW] Allow egress ICMPv6 only for know addresses 
Before that patch it was possible to send ICMPv6 packets like e.g.
    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,
    neutron_lib.constants.ICMPV6_TYPE_RS,
    neutron_lib.constants.ICMPV6_TYPE_NS,
    neutron_lib.constants.ICMPV6_TYPE_NA

And that could cause some security issues as instance could advertise
that it owns IPv6 address which really don't belong to it.

Now rules in table=71 which allows that traffic are "per mac/ipaddress"
and are allowed only for fixed ips allocated to port and port's
allowed_address_pairs.

Conflicts:
    neutron/agent/linux/openvswitch_firewall/firewall.py
    neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py

Closes-Bug: #1902917
Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c
(cherry picked from commit 4b5bcff64c)
 		2021-02-27 21:17:05 +01:00
..
common [OVS] Make QoS OVS agent deletion operations more resilient 2020-07-03 10:17:09 +00:00
dhcp Prioritize port create and update ready messages 2020-05-07 15:11:42 +00:00
l2 Clear residual qos rules after l2-agent restarts. 2019-01-24 06:43:01 +00:00
l3 Fix migration from the HA to non-HA routers 2020-11-19 10:54:15 +00:00
linux [OVS FW] Allow egress ICMPv6 only for know addresses 2021-02-27 21:17:05 +01:00
metadata Remove extra header fields in proxied metadata requests 2020-03-03 20:11:49 +00:00
ovsdb Fixes using SSL OVSDB connection 2018-02-09 04:50:10 +00:00
windows windows: fix terminating processes 2020-10-09 09:41:34 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
test_agent_extensions_manager.py Refactoring config options for l2 agent ext opts 2016-11-21 19:45:04 +00:00
test_resource_cache.py Merge "Fix race condition with enabling SG on many ports at once" 2018-01-27 10:36:37 +00:00
test_rpc.py Use flake8-import-order plugin 2017-07-05 03:15:27 +00:00
test_securitygroups_rpc.py Revert "[Security] fix allowed-address-pair 0.0.0.0/0 issue" 2020-11-17 14:34:08 +00:00