Go to file

Jens Harbott 0fce3ca2c1 Secure dnsmasq process against external abuse

Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e

2018-11-28 15:49:25 -05:00

api-ref

…

bin

…

devstack

Fix devstack/lib/ovs to run with Fedora 28

2018-08-31 15:01:05 +01:00

doc

Merge "supported_vnic_type configurable for ovs"

2018-10-24 04:00:36 +00:00

etc

Merge "Remove _migrate_python_ns_metadata_proxy_if_needed method"

2018-08-21 21:21:50 +00:00

neutron

Secure dnsmasq process against external abuse

2018-11-28 15:49:25 -05:00

playbooks/legacy

Revert "Add openstack/placement as a required project for neutron-grenade*"

2018-10-24 08:46:21 -04:00

rally-jobs

[rally] Port custom plugins to use proper code

2018-05-18 00:25:35 +03:00

releasenotes

Secure dnsmasq process against external abuse

2018-11-28 15:49:25 -05:00

tools

Update abandon_old_reviews script to check Zuul votes

2018-08-30 10:18:48 +02:00

.coveragerc

…

.gitignore

Switch to stestr

2018-06-02 13:03:33 +02:00

.gitreview

…

.mailmap

Add mailmap entry

2014-05-16 13:40:04 -04:00

.pylintrc

Disable some pylint checks

2018-10-03 08:41:56 +00:00

.stestr.conf

Fix post gate hook to accommodate for new os-testr

2017-09-12 14:20:12 -06:00

.zuul.yaml

Merge "Revert "Add openstack/placement as a required project for neutron-grenade*""

2018-10-24 21:54:37 +00:00

babel.cfg

…

bindep.txt

…

CONTRIBUTING.rst

Update link for contribution

2017-08-31 16:44:51 +02:00

HACKING.rst

…

LICENSE

…

lower-constraints.txt

Merge "Upgrade pylint to a version that works with python3"

2018-10-05 17:14:15 +00:00

README.rst

Add release notes link in README

2018-07-10 15:40:00 +07:00

requirements.txt

Merge "Fix best_match() deprecation warning"

2018-10-04 23:33:23 +00:00

setup.cfg

Introduce L3 agent extension for SNAT logging

2018-10-17 10:25:55 +07:00

setup.py

…

test-requirements.txt

Upgrade pylint to a version that works with python3

2018-10-04 18:03:25 +00:00

TESTING.rst

doc: Small clearances for fullstack testing

2018-09-05 09:40:07 +02:00

tox.ini

Fix flake8 N534 untranslated exception message

2018-10-19 15:46:04 -04:00

README.rst

Team and repository tags

Welcome!

To learn more about neutron:

Documentation: https://docs.openstack.org

Features: https://specs.openstack.org/openstack/neutron-specs

Defects: https://launchpad.net/neutron

Release notes: https://docs.openstack.org/releasenotes/neutron/index.html

Get in touch via email. Use [Neutron] in your subject.

To learn how to contribute:

CONTRIBUTING.rst