Neutron's port security extension not enabled in MOS
Bug #1514010 reported by
Adam Heczko
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Fuel for OpenStack |
Fix Released
|
Medium
|
Sergey Kolekonov | ||
7.0.x |
Won't Fix
|
Medium
|
Sergey Kolekonov |
Bug Description
Affects: MOS 7.0 GA and future releases.
Problem description:
Port security extension allows turn off L2 filtering on specified Neutron ports.
This extension was developed in Kilo cycle and addresses issues raised up by operators who were not able to pass L2 traffic to OpenStack instances.
Default action when creating Neutron's port is to still have filtering enabled (it is safe by default from security standpoint).
Solution proposal:
On all MOS controller nodes add:
# file /etc/neutron/
extension_drivers = port_security
Changed in fuel: | |
importance: | Undecided → Medium |
assignee: | nobody → Fuel Library Team (fuel-library) |
milestone: | none → 8.0 |
tags: | added: area-library |
tags: | added: customer-found |
tags: | added: low-hanging-fruit |
Changed in fuel: | |
assignee: | MOS Puppet Team (mos-puppet) → Sergey Kolekonov (skolekonov) |
tags: |
added: area-mos removed: area-library |
Changed in fuel: | |
assignee: | Sergey Kolekonov (skolekonov) → Sergey Vasilenko (xenolog) |
Changed in fuel: | |
assignee: | Sergey Vasilenko (xenolog) → Sergey Kolekonov (skolekonov) |
tags: | added: wontfix-feature |
To post a comment you must log in.
This bug looks like a feature request, I don't suggest to fix it in maintenance updates.