yahoo-eng-team team mailing list archive

[OpenStack Infra <1470931@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/198054
Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=5ab1b1b1c456b8b43edbd1bddd74b96b56ab80e6
Submitter: Jenkins
Branch:    master

commit 5ab1b1b1c456b8b43edbd1bddd74b96b56ab80e6
Author: Adam Kacmarsky <adam.kacmarsky@xxxxxx>
Date:   Thu Jul 2 10:13:16 2015 -0600

    Disable IPv6 on bridge devices
    
    The qbr bridge should not have any IPv6 addresses, either
    link-local, or on the tenant's private network due to the
    bridge processing Router Advertisements from Neutron and
    auto-configuring addresses, since it will allow access to
    the hypervisor from a tenant VM.
    
    The bridge only exists to allow the Neutron security group
    code to work with OVS, so we can safely disable IPv6 on it.
    
    Closes-bug: 1470931
    Partial-bug: 1302080
    
    Change-Id: Ideecab1c21b240bcca71973ed74b0374afb20e5e


** Changed in: nova
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1470931

Title:
  Disable router advertisement for qbr devices

Status in OpenStack Compute (nova):
  Fix Released

Bug description:
  In a multi-node Neutron DVR configuration, nova automatically
  configures the qbr bridge with an IPv6 address. There is no need for
  this to occur, as the bridge is only used by the Neutron security
  group code.

  qbrdac2483c-fc Link encap:Ethernet HWaddr d2:c8:37:c0:86:74 
      inet6 addr: fe80::c0f2:59ff:fe9e:e309/64 Scope:Link
      inet6 addr: fd42:197f:cf11:0:d0c8:37ff:fec0:8674/64 Scope:Global
      inet6 addr: fd42:197f:cf11:0:3504:7d5e:5274:41fb/64 Scope:Global
      UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1  
      RX packets:190 errors:0 dropped:0 overruns:0 frame:0
      TX packets:60 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:0 
      RX bytes:28856 (28.8 KB) TX bytes:9147 (9.1 KB)

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1470931/+subscriptions