openstack
/
neutron
Code Issues Proposed changes
neutron/neutron
History
Slawek Kaplonski cb746e2ca4 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
 		2021-06-04 15:08:09 +00:00
..
agent [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
api DHCP notification optimization 2021-04-17 14:15:16 +00:00
cmd Merge "Initialize privsep library in Neutron commands" into stable/wallaby 2021-04-24 09:38:03 +00:00
common Remove class "Timer" 2021-04-08 13:22:16 +00:00
conf Merge "Fix Floating IP policy rules" into stable/wallaby 2021-04-03 20:38:16 +00:00
core_extensions Set system_scope='all' in elevated context 2021-03-19 12:05:56 +01:00
db Merge "Improve Subnet update performance" into stable/wallaby 2021-05-06 18:36:21 +00:00
debug Remove rootwrap execution (2) 2021-02-06 16:23:03 +00:00
extensions Config option to disable the DHCP functions 2021-03-05 14:35:29 +08:00
hacking Remove "six" library 2020-07-28 16:55:52 +00:00
ipam Allow to manually define the gateway IP when using subnet pools 2021-02-27 10:06:35 +00:00
locale Imported Translations from Zanata 2020-10-11 07:22:44 +00:00
notifiers [OVS] Fix live-migration connection disruption 2021-01-13 11:13:41 +00:00
objects Get only FIP ID on network delete 2021-04-17 14:16:10 +00:00
pecan_wsgi Log exception generated in Controller.prepare_request_body 2020-08-18 16:18:34 -03:00
plugins [OVN] Fix: Disabling snat after it was enabled 2021-05-21 09:18:57 +01:00
privileged Revert "Implement "kill" method using os.kill()" 2021-03-25 22:05:58 +00:00
profiling Remove "six" library 2020-07-28 16:55:52 +00:00
quota Remove "six" library 2020-07-28 16:55:52 +00:00
scheduler Set system_scope='all' in elevated context 2021-03-19 12:05:56 +01:00
server Re-use existing ProcessLauncher from wsgi in RPC workers 2020-02-07 14:51:06 +01:00
services Merge "designate: allow PTR zone creation to fail" into stable/wallaby 2021-05-14 11:18:06 +00:00
tests [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
__init__.py Remove usage of six.PY2 2020-05-22 12:59:01 -04:00
_i18n.py
…
auth.py
…
manager.py Remove usage of six.add_metaclass 2020-05-21 14:41:18 -04:00
neutron_plugin_base_v2.py Remove usage of six.add_metaclass 2020-05-21 14:41:18 -04:00
opts.py Provide the rpc_response_max_timeout parameter to metadata-agent 2021-03-23 18:08:44 +09:00
policy.py Always perform policy checks if enforce_new_defaults == true 2021-03-18 08:51:00 +01:00
service.py Re-use existing ProcessLauncher from wsgi in RPC workers 2020-02-07 14:51:06 +01:00
version.py
…
worker.py Change process name of neutron-server to match worker role 2019-03-01 14:18:09 -05:00
wsgi.py neutron-server api worker process should be named to their role 2021-01-11 08:28:32 +08:00