Public bug reported:
The OVS ARP spoofing protection depends on the port security extension
being enabled to disable ARP spoofing protection on router interfaces
that have floating IP traffic on them. So if the port security extension
is disabled the router interface will get ARP spoofing rules, which
don't know about the floating IPs and will drop the ARP requests for
them.
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1487338
Title:
OVS ARP spoofing protection breaks floating IPs without port security
extension
Status in neutron:
New
Bug description:
The OVS ARP spoofing protection depends on the port security extension
being enabled to disable ARP spoofing protection on router interfaces
that have floating IP traffic on them. So if the port security
extension is disabled the router interface will get ARP spoofing
rules, which don't know about the floating IPs and will drop the ARP
requests for them.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1487338/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
