neutron/neutron/tests/unit/agent/linux/openvswitch_firewall
Slawek Kaplonski cb746e2ca4 [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses
Neighbor Advertisments are used to inform other machines of the MAC
address to use to reach an IPv6. This commits prevents VMs from
pretending they are assigned IPv6 they should not use.

It also prevents sending UDP packets with spoofed IP or MAC even using
DHCP(v6) request ports.

Co-authored-by: David Sinquin <david.sinquin@gandi.net>

Closes-bug: #1902917

Change-Id: Iffb6643359562487414460f5a7e19a7fae9f935c
(cherry picked from commit ca7822e210)
2021-06-04 15:08:09 +00:00
..
__init__.py Open vSwitch conntrack based firewall driver 2016-02-16 16:47:21 +00:00
test_firewall.py [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses 2021-06-04 15:08:09 +00:00
test_iptables.py Remove rootwrap execution (1) 2021-02-06 16:22:43 +00:00
test_rules.py Remove the dependency on the "mock" package 2020-04-28 18:05:37 -04:00