commit 14a1ad7009fb20f21bf58accbd339264bebed3b9
Author: Slawek Kaplonski <email address hidden>
Date: Sat Oct 24 08:27:38 2020 +0000
Revert "Process ingress multicast traffic for 224.0.0.X separately"
This reverts commit b8be1a05facff2ba8b484902494ce1663e0aae7c.
As was reported in bug [1] this patch broke multicast traffic send
from ports with disabled port security. And that broke L3HA routers
as keepalived processes couldn't talk to each other.
During attempt to fix that issue with keepalived we found out another
corner cases which we may break and in fact to fix them, we would
effectively revert this change and allow multicast traffic for all
ports in e.g. networks with ports which have port security and ports
which don't have port security and are on same node.
As we also don't really know what other corner cases we may hit going
further with that, lets revert this patch.
As a follow up patch I will propose new patch which will document
differences in handling multicast traffic between iptables and
openvswitch based firewall drivers.
Reviewed: https:/ /review. opendev. org/759555 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=14a1ad7009f b20f21bf58accbd 339264bebed3b9
Committed: https:/
Submitter: Zuul
Branch: master
commit 14a1ad7009fb20f 21bf58accbd3392 64bebed3b9
Author: Slawek Kaplonski <email address hidden>
Date: Sat Oct 24 08:27:38 2020 +0000
Revert "Process ingress multicast traffic for 224.0.0.X separately"
This reverts commit b8be1a05facff2b a8b484902494ce1 663e0aae7c.
As was reported in bug [1] this patch broke multicast traffic send
from ports with disabled port security. And that broke L3HA routers
as keepalived processes couldn't talk to each other.
During attempt to fix that issue with keepalived we found out another
corner cases which we may break and in fact to fix them, we would
effectively revert this change and allow multicast traffic for all
ports in e.g. networks with ports which have port security and ports
which don't have port security and are on same node.
As we also don't really know what other corner cases we may hit going
further with that, lets revert this patch.
As a follow up patch I will propose new patch which will document
differences in handling multicast traffic between iptables and
openvswitch based firewall drivers.
[1] https:/ /bugs.launchpad .net/neutron/ +bug/1899967
Change-Id: I37a8b33cf8e16d 5bb5dc1966fc2dc a6bb619026c
Closes-Bug: #1899967