yahoo-eng-team team mailing list archive

[Wei Wang <damon.devops@xxxxxxxxx>]

Public bug reported:

Now we can add allowed address pair to every net's port if allowed
address pair is enable.

This will cause security problem in a shared network, I think.

So we should add an limit for shared net or add a config entry in neutron.conf, so administrator
can disables some net's ports' allowed address pairs.

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1373868

Title:
  Should we alow all network can use allowed address pairs?

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Now we can add allowed address pair to every net's port if allowed
  address pair is enable.

  This will cause security problem in a shared network, I think.

  So we should add an limit for shared net or add a config entry in neutron.conf, so administrator
  can disables some net's ports' allowed address pairs.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1373868/+subscriptions