yahoo-eng-team team mailing list archive

[Rodolfo Alonso <2078789@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

This bug only applies to ML2/SR-IOV.

The port field "propagate_uplink_status" defines if the port (VF) will
follow the parent port (PF) status (enabled/disabled). The "auto" status
has precedence over the "enable"/"disable" status. However, this could
be a security issue: if the port owner wants to stop the VF (VM port)
from transmitting any traffic, it is needed first to unset the
"propagate_uplink_status" field [1] and the set the port status to
"disabled".

Scope of this bug: The "disabled" status must have precedence over the
"auto" or "enabled" statuses, for security reasons.


[1]https://bugs.launchpad.net/neutron/+bug/2078661

** Affects: neutron
     Importance: Medium
     Assignee: Rodolfo Alonso (rodolfo-alonso-hernandez)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => Rodolfo Alonso (rodolfo-alonso-hernandez)

** Changed in: neutron
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2078789

Title:
  [SR-IOV] The "auto" VF status has precedence over the
  "enable"/"disable" status

Status in neutron:
  New

Bug description:
  This bug only applies to ML2/SR-IOV.

  The port field "propagate_uplink_status" defines if the port (VF) will
  follow the parent port (PF) status (enabled/disabled). The "auto"
  status has precedence over the "enable"/"disable" status. However,
  this could be a security issue: if the port owner wants to stop the VF
  (VM port) from transmitting any traffic, it is needed first to unset
  the "propagate_uplink_status" field [1] and the set the port status to
  "disabled".

  Scope of this bug: The "disabled" status must have precedence over the
  "auto" or "enabled" statuses, for security reasons.

  
  [1]https://bugs.launchpad.net/neutron/+bug/2078661

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2078789/+subscriptions