openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/agent
History
Slawek Kaplonski ca7822e210 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
 		2021-04-13 15:15:41 +02:00
..
common Fix wrong packet_type set for IPv6 GRE tunnels in OVS 2021-03-02 13:01:39 +01:00
dhcp Don't configure dnsmasq entries for "network" ports 2021-02-18 13:18:12 +01:00
l2 Add the base class DHCPResponder 2021-03-10 10:33:39 +08:00
l3 Merge "Block metadata requests to not go out from the router" 2021-03-28 19:24:02 +00:00
linux [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-04-13 15:15:41 +02:00
metadata Stop metadata proxy gracefully 2021-02-06 17:24:38 +00:00
ovn Trivial: check if ipv6 is available for IptablesManager 2021-03-03 13:48:25 +01:00
ovsdb Remove "ovs-vsctl" support from rootwrap 2020-11-23 16:23:36 +00:00
windows Remove rootwrap execution (1) 2021-02-06 16:22:43 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
agent_extensions_manager.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
dhcp_agent.py Set process name for agents 2020-07-01 12:28:29 +02:00
firewall.py [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-04-13 15:15:41 +02:00
l3_agent.py Set process name for agents 2020-07-01 12:28:29 +02:00
metadata_agent.py Provide the rpc_response_max_timeout parameter to metadata-agent 2021-03-23 18:08:44 +09:00
resource_cache.py Ignore first local port update notification 2019-07-04 12:06:11 +00:00
rpc.py [OVS] Fix live-migration connection disruption 2021-01-13 11:13:41 +00:00
securitygroups_rpc.py Allow sharing of address groups via RBAC mechanism 2021-03-01 18:28:31 -06:00