neutron

  1. Bug #1884341
  2. Comment #5

Comment 5 for bug 1884341

Revision history for this message
Etienne CHAMPETIER (champtar) wrote :

Hi Slawek,

I was not able to test it on an OpenStack deployment,
but yes from reading the code Neutron ML2 with Linuxbridge driver is using iptables bridge firewall + ebtables rules. Using VLAN 0 you completely bypass iptables rules (on the bridge forward path), and ebtables rules are only looking at ARP.

You can easily confirm it using the small scapy script provided