Adds IPinIP protocol

Neutron doesn't support the IP-in-IP protocol by name in
security group rules. With this change a user can now
declare the IP-in-IP protocol by using the name 'ipip'

Note: This doesn't fix an underlying problem
with the Neutron protocol number validator, but
serves as a work around for users wanting to use
the IP-in-IP protocol.

Partial-bug: #1716045

Change-Id: I18e5e42b687e12b64f5a9c523a912c8dd1afa9d2
This commit is contained in:
German Eichberger 2017-09-12 15:18:46 -06:00 committed by Brian Haley
parent ff5ee1720d
commit f4c4b0f20a
2 changed files with 8 additions and 0 deletions

View File

@ -133,6 +133,7 @@ PROTO_NAME_ESP = 'esp'
PROTO_NAME_GRE = 'gre'
PROTO_NAME_ICMP = 'icmp'
PROTO_NAME_IGMP = 'igmp'
PROTO_NAME_IPIP = 'ipip'
PROTO_NAME_IPV6_ENCAP = 'ipv6-encap'
PROTO_NAME_IPV6_FRAG = 'ipv6-frag'
PROTO_NAME_IPV6_ICMP = 'ipv6-icmp'
@ -158,6 +159,7 @@ PROTO_NUM_ESP = 50
PROTO_NUM_GRE = 47
PROTO_NUM_ICMP = 1
PROTO_NUM_IGMP = 2
PROTO_NUM_IPIP = 4
PROTO_NUM_IPV6_ENCAP = 41
PROTO_NUM_IPV6_FRAG = 44
PROTO_NUM_IPV6_ICMP = 58
@ -180,6 +182,7 @@ IP_PROTOCOL_MAP = {PROTO_NAME_AH: PROTO_NUM_AH,
PROTO_NAME_GRE: PROTO_NUM_GRE,
PROTO_NAME_ICMP: PROTO_NUM_ICMP,
PROTO_NAME_IGMP: PROTO_NUM_IGMP,
PROTO_NAME_IPIP: PROTO_NUM_IPIP,
PROTO_NAME_IPV6_ENCAP: PROTO_NUM_IPV6_ENCAP,
PROTO_NAME_IPV6_FRAG: PROTO_NUM_IPV6_FRAG,
PROTO_NAME_IPV6_ICMP: PROTO_NUM_IPV6_ICMP,

View File

@ -0,0 +1,5 @@
---
features:
- |
Adds the IP-in-IP protocol under the name ``ipip`` to the
list of protocols supported in security group rules.