yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #50427
[Bug 1487338] Re: OVS ARP spoofing protection breaks floating IPs without port security extension
** Also affects: neutron/kilo
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1487338
Title:
OVS ARP spoofing protection breaks floating IPs without port security
extension
Status in neutron:
Fix Released
Status in neutron kilo series:
New
Bug description:
The OVS ARP spoofing protection depends on the port security extension
being enabled to disable ARP spoofing protection on router interfaces
that have floating IP traffic on them. So if the port security
extension is disabled the router interface will get ARP spoofing
rules, which don't know about the floating IPs and will drop the ARP
requests for them.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1487338/+subscriptions
References