commit 69419778276a722c3f376046d1e0cc7fc4684e99
Author: Brian Haley <email address hidden>
Date: Thu Nov 30 16:57:51 2017 -0500
Add iptables metadata marking rule on router init
Move the iptables metadata marking rule earlier in
router init, that way any stray metadata requests
that arrive before the filter metadata redirect rule is
installed will just be dropped. We do this irregardless
of whether we will be running the metadata proxy.
Reviewed: https:/ /review. openstack. org/524406 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=69419778276 a722c3f376046d1 e0cc7fc4684e99
Committed: https:/
Submitter: Zuul
Branch: master
commit 69419778276a722 c3f376046d1e0cc 7fc4684e99
Author: Brian Haley <email address hidden>
Date: Thu Nov 30 16:57:51 2017 -0500
Add iptables metadata marking rule on router init
Move the iptables metadata marking rule earlier in
router init, that way any stray metadata requests
that arrive before the filter metadata redirect rule is
installed will just be dropped. We do this irregardless
of whether we will be running the metadata proxy.
Partial-bug: #1735724
Change-Id: I8982523dbb94a7 c5b8a4db88a196f abc4dd2873f