dd153c3bbf
Current ovsfw implementation does not take care of the different
MACs in allowed_address_pairs with the VM's MAC.
This patch use the following method to fix this issue:
1. Do not check dl_src in table=72 because table=71 has checked
dl_src for Egress.
2. Add all allowed MACs in table=0 and table=73 for Ingress.
3. Do not check dl_dst in table=82 because this check has done
in table=0 and table=73.
4. Delete allowed MACs in table=0 and table=73 when needed.
Conflicts:
doc/source/devref/openvswitch_firewall.rst
neutron/agent/linux/openvswitch_firewall/firewall.py
neutron/agent/linux/openvswitch_firewall/rules.py
neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py
neutron/tests/unit/agent/linux/openvswitch_firewall/test_rules.py
Change-Id: Iad59096f0c9855ebfd4a0d5b447e73b443d66c1d
Closes-Bug: #1697593
(cherry picked from commit
|
||
---|---|---|
.. | ||
common | ||
dhcp | ||
l2 | ||
l3 | ||
linux | ||
metadata | ||
ovsdb | ||
windows | ||
__init__.py | ||
test_agent_extensions_manager.py | ||
test_rpc.py | ||
test_securitygroups_rpc.py |