openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/agent/linux
History
Slawek Kaplonski cb746e2ca4 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
 		2021-06-04 15:08:09 +00:00
..
openvswitch_firewall [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
bridge_lib.py Implement "FdbInterface" with Pyroute2 2020-12-24 17:00:06 +00:00
daemon.py Remove "six" library 2020-07-28 16:55:52 +00:00
dhcp.py Trivial: check if ipv6 is available for IptablesManager 2021-03-03 13:48:25 +01:00
dibbler.py Remove "six" library 2020-07-28 16:55:52 +00:00
external_process.py Always use absolute path for custom kill-scripts 2021-04-12 06:23:34 +00:00
interface.py [L3][HA] Retry when setting HA router GW status. 2021-03-02 10:45:50 +00:00
ip_conntrack.py Merge "Remove rootwrap execution (5)" 2021-02-25 20:47:55 +00:00
ip_lib.py Replace "ip route" command in "dvr_local_router" 2021-03-15 16:05:28 +00:00
ipset_manager.py Remove rootwrap execution (5) 2021-02-19 08:47:17 +00:00
iptables_comments.py Iptables firewall driver adds forward rules for trusted ports 2018-03-06 10:13:44 +01:00
iptables_firewall.py Fix "_get_sg_members" method 2021-04-08 15:34:16 +00:00
iptables_manager.py Remove rootwrap execution (4) 2021-02-08 10:05:51 +00:00
keepalived.py Revert "Implement "kill" method using os.kill()" 2021-03-25 22:05:58 +00:00
l3_tc_lib.py Remove rootwrap execution (1) 2021-02-06 16:22:43 +00:00
of_monitor.py OpenFlow monitor 2019-11-20 18:00:13 +00:00
pd.py Merge "Improve terminology in the Neutron tree" 2020-08-28 14:06:18 +00:00
pd_driver.py Remove usage of six.add_metaclass 2020-05-21 14:41:18 -04:00
ra.py Remove more empty lines in ipv6 ra conf. 2020-09-30 11:02:02 +08:00
tc_lib.py Fix the wrong value for QoS rate conversion to bytes/s 2020-06-20 19:38:30 +00:00
utils.py Revert "Implement "kill" method using os.kill()" 2021-03-25 22:05:58 +00:00