OpenStack Networking (Neutron)
Go to file
Jens Harbott 72d9c3ccb3 Secure dnsmasq process against external abuse
Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Conflicts:
    neutron/cmd/sanity_check.py

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e
(cherry picked from commit 0fce3ca2c1)
2019-01-25 13:58:43 +00:00
api-ref Fix some typos 2016-06-28 22:46:19 +02:00
bin Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00
devstack DevStack: OVS: Only install kernel-* packages when needed 2018-11-23 10:24:09 +00:00
doc Add missing step for ovs deploy guides 2018-11-07 19:17:40 +00:00
etc Enable bridge command for openvswitch agent 2017-11-09 07:01:04 -05:00
neutron Secure dnsmasq process against external abuse 2019-01-25 13:58:43 +00:00
playbooks/legacy Merge "Removed neutron-tempest-full" into stable/pike 2018-01-25 21:15:33 +00:00
rally-jobs Switch rally job from q-* to neutron-* service names 2018-01-10 14:07:10 -08:00
releasenotes Secure dnsmasq process against external abuse 2019-01-25 13:58:43 +00:00
tools Disable IPv6 forwarding by default on HA routers 2018-06-04 13:07:55 +00:00
.coveragerc Cleanup coverage configuration 2016-10-17 17:06:19 +05:30
.gitignore Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
.gitreview Update .gitreview for stable/pike 2017-08-11 08:59:13 +00:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc Update pylint disable list to pass pylint 1.7.1 checks 2017-06-08 09:49:46 +00:00
.stestr.conf Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
.testr.conf Allow more time for DB migration tests 2016-09-21 20:54:41 -04:00
.zuul.yaml import zuul job settings from project-config 2018-09-19 02:57:29 +00:00
CONTRIBUTING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
HACKING.rst Update the documentation link for doc migration 2017-07-22 18:46:13 +09:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00
README.rst Optimize the link address 2017-04-07 09:55:12 +08:00
TESTING.rst docs: clarify wording about how to use advanced glance image 2017-08-01 08:56:45 -07:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
bindep.txt Add libffi-dev to bindep.txt 2017-06-13 19:26:49 +00:00
requirements.txt Updated from global requirements 2017-09-12 16:22:23 +00:00
run_tests.sh Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
setup.cfg Include all rootwrap filters when building wheels 2018-11-22 13:43:29 +00:00
setup.py Updated from global requirements 2017-03-04 11:19:58 +00:00
test-requirements.txt Fix post gate hook to accommodate for new os-testr 2018-05-04 10:46:38 +00:00
tox.ini Fix pep8 errors 2018-04-17 10:39:04 -04:00

README.rst

Team and repository tags

image

Welcome!

To learn more about neutron:

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst