]> review.fuel-infra Code Review - openstack-build/neutron-build.git/commit
Code Review / openstack-build / neutron-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 46c0da4) | patch
Add conntrack-tool to manage security groups
authorshihanzhang <shihanzhang@huawei.com>
Thu, 15 Jan 2015 12:16:21 +0000 (20:16 +0800)
committershihanzhang <shihanzhang@huawei.com>
Tue, 21 Jul 2015 12:24:53 +0000 (20:24 +0800)
commitaa608d2e042e8c5033cdaf805615aaf03678edb7
tree9f6b70fdad71cfad389f5cf4082ceb13917f66fatree | snapshot
parent46c0da4fc5061e7b1f92fd04c633ebdbf3ab49d5commit | diff
Add conntrack-tool to manage security groups

This patch introduces conntrack-tool to manage security groups. When a
security group rule is deleted, the corresponding tracked connection
entries will also be removed from the kernel for the address.

Closes-Bug: #1335375
Partially-Implements: bp conntrack-in-security-group

Change-Id: Ibfd2d6a11aa970ea9e5009f4c4b858544d8b7463
neutron/agent/firewall.py diff | blob | history
neutron/agent/linux/ip_conntrack.py [new file with mode: 0644] blob
neutron/agent/linux/iptables_firewall.py diff | blob | history
neutron/agent/securitygroups_rpc.py diff | blob | history
neutron/tests/unit/agent/linux/test_iptables_firewall.py diff | blob | history