Today we don't treat a port with disable-port-security the same as firewall_driver=noop:
https://opendev.org/openstack/neutron/src/commit/c6ac441a5160b79c48d04596ab464e0bac9f6592/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L2301-L2306 https://opendev.org/openstack/neutron/src/commit/c6ac441a5160b79c48d04596ab464e0bac9f6592/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L2344-L2350
But maybe we could do that? And install the same direct output flows for ports with disable-port-security?
Today we don't treat a port with disable- port-security the same as firewall_ driver= noop:
https:/ /opendev. org/openstack/ neutron/ src/commit/ c6ac441a5160b79 c48d04596ab464e 0bac9f6592/ neutron/ plugins/ ml2/drivers/ openvswitch/ agent/ovs_ neutron_ agent.py# L2301-L2306 /opendev. org/openstack/ neutron/ src/commit/ c6ac441a5160b79 c48d04596ab464e 0bac9f6592/ neutron/ plugins/ ml2/drivers/ openvswitch/ agent/ovs_ neutron_ agent.py# L2344-L2350
https:/
But maybe we could do that? And install the same direct output flows for ports with disable- port-security?