We are glad to announce the release of: neutron 11.0.3: OpenStack Networking This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 11.0.3 ^^^^^^ New Features ************ * L2 agents based on "ML2" "_common_agent" have now the L2 extension API available. This API can be used by L2 extension drivers to request resources from the L2 agent. It is used, for example, to pass an instance of the "IptablesManager" to the "Linuxbridge" L2 agent "QoS extension driver". Bug Fixes ********* * Fixes bug 1736674, security group rules are now properly applied by "Linuxbridge L2 agent" with "QoS extension driver" enabled. * Adding security group rules by protocol number is documented, but somehow was broken without being noticed in one of the last couple of releases. This is now fixed. For more information see bug 1716045 (https://bugs.launchpad.net/neutron/+bug/1716045). Changes in neutron 11.0.2..11.0.3 --------------------------------- 03c35d2 Fix creation of port when network has admin's QoS policy set 8e0c0b8 DVR: verify subnet has gateway_ip before installing IPv4 flow 30b86eb Fix error message when duplicate QoS rule is created 51e8615 Always pass device_owner to _ipam_get_subnets() c0894f9 Fixing the filter in get MTU by network list query. 5b0a0f5 DVR: Fix dvr_no_external agent restart with fips c00ddc0 Zuul: Remove project name edd6e51 [Fullstack] Change how DSCP marking packets are tested a367874 [Fullstack] Shutdown tcpdump process gracefully a82b5f1 More efficiently clean up OVS ports 59520d6 Add retry decorator update_segment_host_mapping() f74b39c Add log-tag to haproxy config file f7207d4 Fix _port_arg for security rules with icmp/ipv6-icmp aliases 91f377c l3_ha: only pass host into update_port when updating router port bindings 5ab223d Speed up trunk MTU enforcement check f1e669c ovs-lib: Pass string as udp port to ovsdb 27c58c6 Add missing iptable rule in snat ns for centralized fips. 990f943 Removed neutron-tempest-full b9302f5 Switch rally job from q-* to neutron-* service names 615ced7 Fix error when using protocol number in security groups d16f69b Support protocol numbers in security group API b0c7a64 Checksum-fill proxied metadata replies b0f7be9 Use same instance of iptables_manager in L2 agent and extensions 15d843a Fix callers of get_devices_with_ip() to pass addresses c82c0f7 Moving legacy check and gate jobs 3e49cc7 trunk: Create vxlan network when testing inherit 78e3dbc ipam: don't commit IPAllocation while IpamAllocation is rolled back adc344c [Qos] ingress bandwidth limit by ovs is not accurate 10c5788 tempest: check router interface exists before ssh 9dff53c Move segment deletion back to PRECOMMIT_DELETE 40a811b [Qos] Fix residues of ovs in ingress bw limit 622d0bc ovs-fw: catches exception from ovsdb d67ad73 Added test suite and case to cover 'availability zone' 0b960a9 Fix HA router initialization exception cd45277 Fix DNS connectivity issues with DVR+HA routers and DHCP-HA 5c16f2b ovsfw: Use multiple priorities in RULES_*_TABLE f6560d1 Call update_all_ha_network_port_statuses on agent start 7fd30cb fullstack: Wait at least 3 minute for agents to report 04b1554 ovsfw: Merge multiple conjunction flows 3985aec Do not load default service plugins if core plugin is not DB based c3896b6 Change iptables-restore lock interval to 5 per second 6809a6d Move check_ha_state_for_router() into notification code 2791ea0 Do not create fip agent port for dvr_no_external node Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 267 +++++++++++++++++++++ .../contributor/internals/l2_agent_extensions.rst | 11 + .../contributor/internals/openvswitch_firewall.rst | 117 +++++++-- .../contributor/internals/quality_of_service.rst | 4 + neutron/agent/common/ovs_lib.py | 66 +++-- neutron/agent/l3/agent.py | 42 +++- neutron/agent/l3/dvr_edge_router.py | 7 +- neutron/agent/l3/dvr_fip_ns.py | 3 +- neutron/agent/l3/ha_router.py | 18 +- neutron/agent/l3/router_info.py | 1 + neutron/agent/l3/router_processing_queue.py | 7 +- neutron/agent/linux/ip_lib.py | 7 +- neutron/agent/linux/iptables_firewall.py | 21 +- neutron/agent/linux/iptables_manager.py | 105 ++++---- .../agent/linux/openvswitch_firewall/firewall.py | 66 +++-- neutron/agent/linux/openvswitch_firewall/rules.py | 157 +++++++++++- neutron/agent/metadata/driver.py | 20 +- neutron/agent/ovsdb/impl_idl.py | 35 +++ neutron/cmd/ovs_cleanup.py | 43 ++-- neutron/common/constants.py | 83 ++++++- neutron/common/exceptions.py | 6 + neutron/common/utils.py | 9 + neutron/db/db_base_plugin_v2.py | 8 + neutron/db/ipam_backend_mixin.py | 6 +- neutron/db/ipam_pluggable_backend.py | 7 +- neutron/db/l3_db.py | 2 +- neutron/db/l3_dvr_db.py | 36 ++- neutron/db/l3_hamode_db.py | 20 +- neutron/ipam/exceptions.py | 3 +- neutron/manager.py | 6 +- neutron/neutron_plugin_base_v2.py | 7 + neutron/objects/common_types.py | 2 +- neutron/objects/qos/qos_policy_validator.py | 21 ++ neutron/objects/qos/rule.py | 23 ++ .../ml2/drivers/agent/_agent_manager_base.py | 7 + neutron/plugins/ml2/drivers/agent/_common_agent.py | 3 +- .../agent/extension_drivers/qos_driver.py | 21 +- .../agent/linuxbridge_agent_extension_api.py | 32 +++ .../linuxbridge/agent/linuxbridge_neutron_agent.py | 28 ++- .../drivers/macvtap/agent/macvtap_neutron_agent.py | 3 + .../agent/extension_drivers/qos_driver.py | 32 ++- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 11 +- neutron/services/qos/qos_plugin.py | 12 +- neutron/services/segments/db.py | 5 +- neutron/services/trunk/rules.py | 81 +++++-- .../functional/agent/l3/test_legacy_router.py | 18 +- .../l3_router/test_l3_dvr_router_plugin.py | 10 + .../tempest/scenario/admin/test_floatingip.py | 109 +++++++++ .../unit/agent/l3/test_router_processing_queue.py | 10 + .../linux/openvswitch_firewall/test_firewall.py | 26 +- .../agent/linux/openvswitch_firewall/test_rules.py | 141 ++++++++++- .../unit/agent/linux/test_iptables_firewall.py | 93 +++++++ .../unit/agent/linux/test_iptables_manager.py | 24 +- .../unit/extensions/test_subnet_service_types.py | 27 ++- .../agent/extension_drivers/test_qos_driver.py | 37 +++ .../agent/test_linuxbridge_agent_extension_api.py | 33 +++ .../agent/extension_drivers/test_qos_driver.py | 17 +- playbooks/legacy/neutron-fullstack/post.yaml | 80 ++++++ playbooks/legacy/neutron-fullstack/run.yaml | 54 +++++ playbooks/legacy/neutron-functional/post.yaml | 80 ++++++ playbooks/legacy/neutron-functional/run.yaml | 54 +++++ .../legacy/neutron-grenade-dvr-multinode/post.yaml | 15 ++ .../legacy/neutron-grenade-dvr-multinode/run.yaml | 47 ++++ .../legacy/neutron-grenade-multinode/post.yaml | 15 ++ .../legacy/neutron-grenade-multinode/run.yaml | 47 ++++ playbooks/legacy/neutron-grenade/post.yaml | 15 ++ playbooks/legacy/neutron-grenade/run.yaml | 57 +++++ playbooks/legacy/neutron-rally-neutron/post.yaml | 41 ++++ playbooks/legacy/neutron-rally-neutron/run.yaml | 175 ++++++++++++++ .../post.yaml | 15 ++ .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 63 +++++ playbooks/legacy/neutron-tempest-dvr/post.yaml | 15 ++ playbooks/legacy/neutron-tempest-dvr/run.yaml | 44 ++++ .../legacy/neutron-tempest-linuxbridge/post.yaml | 15 ++ .../legacy/neutron-tempest-linuxbridge/run.yaml | 57 +++++ .../neutron-tempest-multinode-full/post.yaml | 15 ++ .../legacy/neutron-tempest-multinode-full/run.yaml | 64 +++++ playbooks/legacy/neutron-tempest-ovsfw/post.yaml | 15 ++ playbooks/legacy/neutron-tempest-ovsfw/run.yaml | 48 ++++ rally-jobs/extra/trunk_scenario.setup | 2 +- ...ommon-agent-extension-api-3fd06ff67329200a.yaml | 12 + ...group-protocol-by-numbers-48afb97ede961716.yaml | 8 + 111 files changed, 3380 insertions(+), 447 deletions(-)