]> review.fuel-infra Code Review - openstack-build/neutron-build.git/commit
Add portsecurity extension support
authorYalei Wang <yalei.wang@intel.com>
Mon, 9 Feb 2015 19:22:27 +0000 (03:22 +0800)
committerYalei Wang <yalei.wang@intel.com>
Mon, 16 Mar 2015 21:13:04 +0000 (05:13 +0800)
commit554d266f56862d4f15de104e9199e9149124efbe
treefb389819f01d890720b79134ab540dd59596a7dc
parent5daf88fdb34877c8c3b6ce0925f5a40d045acc7c
Add portsecurity extension support

Add portsecurity extension driver into ML2 plugin and implement it in
iptables_firewall.

The scope of this change is:
    - Abstract a common class PortSecurityDbCommon from the old
      PortSecurityDbMixin
    - Add a new extension driver port-security, implement process_xxx and
      extend_xxx_dict method and provide a db migration from the existing
      networks and ports
    - Update the new added 'unfiltered_ports' in iptables firewall of l2 agent
      to reflect the update of port-security

Co-Authored-By: Shweta P <shpadubi@cisco.com>
Change-Id: I2da53168e2529db7a8094ce90ef3a8a93fe55727
Partially Implements: blueprint ml2-ovs-portsecurity
14 files changed:
neutron/agent/linux/iptables_comments.py
neutron/agent/linux/iptables_firewall.py
neutron/db/migration/alembic_migrations/versions/35a0f3365720_add_port_security_in_ml2.py [new file with mode: 0644]
neutron/db/migration/alembic_migrations/versions/HEAD
neutron/db/portsecurity_db.py
neutron/db/portsecurity_db_common.py [new file with mode: 0644]
neutron/plugins/ml2/extensions/__init__.py [new file with mode: 0644]
neutron/plugins/ml2/extensions/port_security.py [new file with mode: 0644]
neutron/plugins/ml2/plugin.py
neutron/tests/functional/agent/linux/test_iptables_firewall.py
neutron/tests/unit/ml2/test_ext_portsecurity.py [new file with mode: 0644]
neutron/tests/unit/test_extension_portsecurity.py
neutron/tests/unit/test_iptables_firewall.py
setup.cfg