openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/agent
History
Slawek Kaplonski ac474307d3 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
 		2021-05-14 14:41:28 +00:00
..
common Fix multicast traffic with IGMP snooping enabled 2021-03-08 15:54:43 +00:00
dhcp Don't configure dnsmasq entries for "network" ports 2021-03-09 15:29:31 +00:00
l2 Fix pep8 E128 warnings in non-test code 2019-03-12 21:22:33 +00:00
l3 Clean port forwarding cache when router is DOWN 2021-03-10 14:36:42 +00:00
linux [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-05-14 14:41:28 +00:00
metadata Add locks for setting iptables rules in l3 and metadata agents 2021-04-09 16:05:46 +02:00
ovn Merge "[OVN] MetadataProxyHandler to conditionally monitor both Chassis's tables" into stable/ussuri 2021-04-28 17:24:50 +00:00
ovsdb Make NeutronOvsdbIdl singleton 2020-10-08 13:18:23 +00:00
windows windows: fix terminating processes 2020-10-09 09:40:12 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
agent_extensions_manager.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
dhcp_agent.py Deprecate config option "ovs_integration_bridge" 2020-02-17 11:02:16 +00:00
firewall.py [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-05-14 14:41:28 +00:00
l3_agent.py Deprecate config option "ovs_integration_bridge" 2020-02-17 11:02:16 +00:00
metadata_agent.py Provide the rpc_response_max_timeout parameter to metadata-agent 2021-05-01 16:08:54 +00:00
resource_cache.py Ignore first local port update notification 2019-07-04 12:06:11 +00:00
rpc.py ovs agent: signal to plugin if tunnel refresh needed 2020-01-09 14:18:43 +00:00
securitygroups_rpc.py Lock sg updates while in _apply_port_filter() 2021-03-11 00:21:33 +00:00