networking-hyperv

Neutron Hyper-V Agent does not allow MAC spoofing

Bug #1744937 reported by Claudiu Belu on 2018-01-23

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	networking-hyperv	Fix Released	Undecided	Unassigned

Bug Description

MAC spoofing protection is enabled and set by default for all Hyper-V ports.

Other neutron L2 agents are enabling / disabling ARP spoofing protection for neutron ports based on the CONF.AGENT.prevent_arp_spoofing config option and if neutron port's security groups are enable or disabled; behaviour which is not followed by the Neutron Hyper-V Agent.

This issue can affect different scenarios like Hyper-V nested virtualization.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2018-01-25: Fix merged to networking-hyperv (master)

Reviewed: https://review.openstack.org/535785
Committed: https://git.openstack.org/cgit/openstack/networking-hyperv/commit/?id=b77863700634201bd942df0af4631581bb535980
Submitter: Zuul
Branch: master

commit b77863700634201bd942df0af4631581bb535980
Author: Claudiu Belu <email address hidden>
Date: Fri Jan 19 16:48:18 2018 +0200

Sets MAC spoof if neutron port security groups enabled / disabled

MAC spoofing protection is enabled and set by default for all Hyper-V ports.

    Other neutron L2 agents are enabling / disabling ARP spoofing protection
    for neutron ports if neutron port's security groups are enable or disabled;
    behaviour which is not followed by the Neutron Hyper-V Agent.

This patch ensures the same behaviour in this regard.

Closes-Bug: #1744937

Change-Id: I069716fe9a0f4f2d64d43c3c2c565ee7540444a8