Neutron API reference should explain the intended behavior of port security extension
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Confirmed
|
Low
|
Unassigned |
Bug Description
https:/
The explanation as of the time of writing is as follows:
"The port-security extension adds the port_security_
It explains how the attribute behaves and how it's inherited by ports, but there is no explanation of what the attribute DOES. Does it disable anti-spoofing? Or SGs? Or both? Is the fact that - traditionally - port_security_
Same problem as to how port level extension is explained: https:/
"The port-security extension adds the port_security_
Changed in neutron: | |
status: | New → Confirmed |
importance: | Undecided → Low |
Perhaps relevant to the question of the intended behavior is this wiki page: https:/ /wiki.openstack .org/wiki/ Neutron/ ML2PortSecurity ExtensionDriver even though it's not an official document. It says:
"By creating a port security extension flag, it is possible to enable/disable packet filtering."
which - probably! - implies that both anti-spoofing and ACLs are affected by the flag. If so, this should be clarified in api-ref.