OpenStack Networking (Neutron)
Go to file
Kevin Benton f142cde767 Move conntrack zones to IPTablesFirewall
The regular IPTablesFirewall needs zones to support safely
clearly conntrack entries.

In order to support the single bridge use case, the conntrack
manager had to be refactored slightly to allow zones to be
either unique to ports or unique to networks.

Since all ports in a network share a bridge in the IPTablesDriver
use case, a zone per port cannot be used since there is no way
to distinguish which zone traffic should be checked against when
traffic enters the bridge from outside the system.

A zone per network is adequate for the single bridge per network
solution since it implicitly does not suffer from the double-bridge
cross in a single network that led to per port usage in OVS.[1]

This had to adjust the functional firewall tests to use the correct
bridge name now that it's relevant in the non hybrid IPTables case.

1. Ibe9e49653b2a280ea72cb95c2da64cd94c7739da

Closes-Bug: #1668958
Closes-Bug: #1657260
Change-Id: Ie88237d3fe4807b712a7ec61eb932748c38952cc
(cherry picked from commit c76164c058)
2017-05-14 20:56:00 -04:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin XenAPI: add support for conntrack with XenServer 2017-01-18 15:29:17 +00:00
devstack fullstack: Compile openvswitch module for fullstack test 2017-04-21 07:56:17 +00:00
doc Fix link in QoS devref 2017-04-07 09:01:53 +00:00
etc Kill processes when cleaning up namespaces 2017-01-09 16:21:55 +00:00
neutron Move conntrack zones to IPTablesFirewall 2017-05-14 20:56:00 -04:00
rally-jobs Fixed validation of create_and_list_trunk_subports rally scenario 2017-04-06 14:55:47 -07:00
releasenotes Add support for Keepalived VRRP health check 2017-04-07 08:18:15 -04:00
tools ovsfw: Support protocol numbers instead of just tcp and udp 2017-01-23 06:17:52 -05:00
.coveragerc Change ignore-errors to ignore_errors 2015-09-21 14:31:29 +00:00
.gitignore Automatically generate neutron core configuration files 2015-11-27 15:22:59 +00:00
.gitreview Update .gitreview for stable/newton 2016-09-16 12:11:27 -04:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc pylint: remove 'openstack' from ignore list 2016-09-08 16:39:02 +00:00
.testr.conf Allow more time for DB migration tests 2016-09-22 12:40:47 +00:00
CONTRIBUTING.rst Workflow documentation is now in infra-manual 2014-12-05 03:30:37 +00:00
HACKING.rst Forbid importing neutron.tests.* from outside tests subtree 2016-09-20 01:43:19 +00:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
MANIFEST.in Include alembic versions directory to the package 2015-10-21 07:26:24 +00:00
README.rst corrected the link in README.rst 2016-08-01 23:48:05 +08:00
TESTING.rst Add rally hook to neutron devstack plugin 2016-12-14 20:55:19 +00:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
requirements.txt Updated from global requirements 2016-09-20 13:12:59 +00:00
run_tests.sh Remove check for bash usage 2015-04-07 15:15:33 +00:00
setup.cfg Kill processes when cleaning up namespaces 2017-01-09 16:21:55 +00:00
setup.py Updated from global requirements 2015-09-21 18:56:49 +00:00
test-requirements.txt Updated from global requirements 2016-09-01 04:58:44 +00:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/newton 2016-09-16 12:11:34 -04:00

README.rst

Welcome!

You have come across a cloud computing network fabric controller. It has identified itself as "Neutron." It aims to tame your (cloud) networking!

External Resources:

The homepage for Neutron is: http://launchpad.net/neutron. Use this site for asking for help, and filing bugs. Code is available on git.openstack.org at <http://git.openstack.org/cgit/openstack/neutron>.

The latest and most in-depth documentation on how to use Neutron is available at: <http://docs.openstack.org>. This includes:

Neutron Administrator Guide

http://docs.openstack.org/admin-guide/networking.html

Neutron Developer Guide

http://docs.openstack.org/developer/neutron/devref/

Networking Guide

http://docs.openstack.org/networking-guide/

Neutron API Reference:

http://developer.openstack.org/api-ref/networking/v2/

Current Neutron developer documentation is available at:

http://wiki.openstack.org/NeutronDevelopment

For help on usage and hacking of Neutron, please send mail to <mailto:openstack-dev@lists.openstack.org>.

For information on how to contribute to Neutron, please see the contents of the CONTRIBUTING.rst file.