openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/agent
History
Slawek Kaplonski cb746e2ca4 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
 		2021-06-04 15:08:09 +00:00
..
common Physical NIC RP should be child of agent RP 2021-05-05 08:09:36 +00:00
dhcp Don't configure dnsmasq entries for "network" ports 2021-02-18 13:18:12 +01:00
l2 Add the base class DHCPResponder 2021-03-10 10:33:39 +08:00
l3 HA-non-DVR router don't need manually add static route 2021-05-25 00:56:27 +00:00
linux [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
metadata Add locks for setting iptables rules in l3 and metadata agents 2021-04-09 13:59:51 +00:00
ovn Merge "[OVN] MetadataProxyHandler to conditionally monitor both Chassis's tables" into stable/wallaby 2021-04-28 15:53:15 +00:00
ovsdb Remove "ovs-vsctl" support from rootwrap 2020-11-23 16:23:36 +00:00
windows Remove rootwrap execution (1) 2021-02-06 16:22:43 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
agent_extensions_manager.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
dhcp_agent.py Set process name for agents 2020-07-01 12:28:29 +02:00
firewall.py [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
l3_agent.py Set process name for agents 2020-07-01 12:28:29 +02:00
metadata_agent.py Provide the rpc_response_max_timeout parameter to metadata-agent 2021-03-23 18:08:44 +09:00
resource_cache.py Ignore first local port update notification 2019-07-04 12:06:11 +00:00
rpc.py [OVS] Fix live-migration connection disruption 2021-01-13 11:13:41 +00:00
securitygroups_rpc.py Allow sharing of address groups via RBAC mechanism 2021-03-01 18:28:31 -06:00