Open Stack

We eagerly announce the release of:

neutron 15.3.1: OpenStack Networking

This release is part of the train stable release series.

The source is available from:

    https://opendev.org/openstack/neutron

Download the package from:

    https://tarballs.openstack.org/neutron/

Please report issues through:

    https://bugs.launchpad.net/neutron/+bugs

For more details, please see below.

15.3.1
^^^^^^


New Features
************

* "DVR" routers now support "flat" networks.


Bug Fixes
*********

* Fixed bug 1876092
  (https://bugs.launchpad.net/neutron/+bug/1876092) which caused DUP
  ICMP replies on the "flat" networks used with "DVR" routers.

* Fixed MAC learning issue when ovs offload enabled. OVS firewall
  reduce the usage of normal actions to reduce cpu utilization. This
  causing flood rule because there is no MAC learning on ingress
  traffic. While this ok for none offload case, when using ovs offload
  flood rule is not offloaded. This fix the MAC learning in the
  offload, so we avoid flood rule. #1897637
  (https://bugs.launchpad.net/neutron/+bug/1897637).

Changes in neutron 15.3.0..15.3.1
---------------------------------

cce4120e5d Revert "[Security] fix allowed-address-pair 0.0.0.0/0 issue"
bf8fc2db0c Fix removal of dvr-src mac flows when non-gateway port on router is deleted
f65bea4943 Ensure "keepalived" is correcly disabled
3b6cf23aa3 Neutron ovs agent: set mtu of smartnic port
9c1f940d82 Don't fail if FIP is not in port forwarding cache during cleaning
c121b1caa9 Add WaitForPortCreateEvent in BaseOVSTestCase
4f06660447 Randomize port name in "BaseOVSTestCase"
ef37b3a39a Dropping lower constraints testing (stable Train)
80abfca487 [GRE] Add possibility to create GRE tunnels over IPv6
cf4d045ac5 Improve the CIDRs overlap check method for router add interface
03f0a832a8 Fix OVS conjunctive IP flows cleanup
c9416b1013 [train] Fix tests with new pip resolver
a5d8623a2a Flush ebtables arp protect chains before deleting them
0f77298775 Fix calling of add_tunnel_port method from sanity checks module
4de2221853 Fix migration from the HA to non-HA routers
0e6a429158 Rehome api tests for propagate_uplink_status
dea24403a7 Fix ovs agent, avoiding import error
9c08212576 Fix formatting error in agent/linux/external_process.py
fd22aad5c2 Switch tripleo standalone job to content provider
c06895e8e7 Local mac direct flow for non-openflow firewall
cbb949379c ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled
4ef6566b6d "scope" conversion only just before pyroute2 method call
ae74b483c3 Make NeutronOvsdbIdl singleton
86463bd822 [Functional] Add logging to the check test file function
35eddd53f9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec
a9af91846a Import "oslo_config.cfg" before "eventlet"
bcc21b306d windows: fix terminating processes
bfa14f7f29 Support gateway which is not in subnet CIDR in ha_router
8654eb2d18 Default dnsmasq --conf-file to /dev/null
84d38f342b Ensure fip ip rules deleted when fip removed
468bc1989a Make DVR router support FLAT network for ovs-agent


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         |  18 +-
TESTING.rst                                        |   6 +-
lower-constraints.txt                              | 154 ------------
neutron/agent/common/ovs_lib.py                    |  16 ++
neutron/agent/l3/agent.py                          |  17 ++
neutron/agent/l3/dvr_fip_ns.py                     |   3 +
neutron/agent/l3/dvr_local_router.py               |  27 ++-
neutron/agent/l3/extensions/port_forwarding.py     |   6 +-
neutron/agent/l3/ha_router.py                      |   9 +
neutron/agent/linux/dhcp.py                        |   3 +-
neutron/agent/linux/external_process.py            |   2 +-
neutron/agent/linux/ip_lib.py                      |   2 +-
neutron/agent/linux/ipset_manager.py               |   2 +-
neutron/agent/linux/iptables_firewall.py           |   2 +-
neutron/agent/linux/keepalived.py                  |  12 +-
.../agent/linux/openvswitch_firewall/firewall.py   |  71 ++++--
neutron/agent/linux/openvswitch_firewall/rules.py  |   6 -
neutron/agent/ovsdb/impl_idl.py                    |   4 +-
neutron/agent/windows/utils.py                     |  15 +-
neutron/api/rpc/handlers/securitygroups_rpc.py     |   6 +-
neutron/cmd/sanity/checks.py                       |  22 +-
neutron/common/utils.py                            |  12 +
neutron/db/l3_db.py                                |  15 +-
neutron/db/securitygroups_rpc_base.py              |  23 +-
.../ml2/drivers/linuxbridge/agent/arp_protect.py   |  14 +-
.../drivers/linuxbridge/agent/common/constants.py  |   3 -
.../drivers/openvswitch/agent/common/constants.py  |  25 +-
.../openvswitch/agent/openflow/native/br_int.py    |  37 +--
.../openvswitch/agent/openflow/native/br_phys.py   |   8 +-
.../openvswitch/agent/ovs_dvr_neutron_agent.py     | 121 ++++++----
.../drivers/openvswitch/agent/ovs_neutron_agent.py | 206 ++++++++++------
.../functional/agent/linux/bin/ipt_binname.py      |   5 +-
.../linux/openvswitch_firewall/test_firewall.py    |  97 +++++---
.../agent/linux/openvswitch_firewall/test_rules.py |   3 +-
.../unit/agent/linux/test_iptables_firewall.py     |  22 +-
.../api/rpc/handlers/test_securitygroups_rpc.py    |  22 +-
.../drivers/linuxbridge/agent/test_arp_protect.py  |  16 ++
.../agent/openflow/native/test_br_int.py           | 115 +++++++--
.../agent/openflow/native/test_br_phys.py          |   6 +-
.../openvswitch/agent/test_ovs_neutron_agent.py    | 260 ++++++++++++++++++---
.../drivers/openvswitch/agent/test_ovs_tunnel.py   |  28 +++
...port-flat-network-for-ovs-fdf8c3eb461426ec.yaml |   9 +
...ning-in-case--ovs-offload-26193bf1638fd673.yaml |  10 +
requirements.txt                                   |   6 +-
test-requirements.txt                              |   2 +-
tox.ini                                            |   8 -
68 files changed, 1430 insertions(+), 566 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 4ba3f71160..d86abeb51a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9 +9 @@ Routes>=2.3.1 # MIT
-debtcollector>=1.2.0 # Apache-2.0
+debtcollector>=1.19.0 # Apache-2.0
@@ -24 +24 @@ WebOb>=1.8.2 # MIT
-keystoneauth1>=3.4.0 # Apache-2.0
+keystoneauth1>=3.14.0 # Apache-2.0
@@ -49 +49 @@ ovs>=2.8.0 # Apache-2.0
-ovsdbapp>=0.9.1 # Apache-2.0
+ovsdbapp>=0.12.1 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index 5f4a05d6b1..a1ec3b6e20 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -6 +6 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0