We jubilantly announce the release of: os_vif 1.15.2: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. 1.15.2 ^^^^^^ Security Issues *************** * Prevent Linux Bridge from replying to ARP messages. It should reply only if the target IP address is a local address configured on the incoming interface and it should always use the best local address. See The ARP flux problem (http://linux-ip.net/html/ether- arp.html #ether-arp-flux) for more information. Bug Fixes ********* * As part of a bug #1715317, MAC ageing was disabled for the intermediate bridge created as part of the hybrid plug mechanism. During the removal of "brctl", this behavior was inadvertently applied to all linux bridges created by os-vif including those used in the linuxbridge driver. As a result this can lead to packet flooding (see bug #1837252) when instances are migrated. This behavior has been reverted so that the default mac ageing is determined by the kernel and is not set when using the os-vif linux bridge plugin. (https://bugs.launchpad.net/os-vif/+bug/1837252) Changes in os_vif 1.15.1..1.15.2 -------------------------------- ec9d543 only disable mac ageing for ovs hybrid plug 6e6c0f6 Fix mock of built in "open" function in unit tests 9730022 set ignore_basepython_conflict = True in tox.ini c42e764 Prevent "qbr" Linux Bridge from replying to ARP messages 0dac311 OpenDev Migration Patch 6242d24 Replace openstack.org git:// URLs with https:// 59c5576 Update UPPER_CONSTRAINTS_FILE for stable/stein 097dbaf Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 8 +++---- os_vif/internal/command/ip/__init__.py | 4 ++-- os_vif/internal/command/ip/ip_command.py | 4 +++- os_vif/internal/command/ip/linux/impl_pyroute2.py | 12 ++++++++-- .../internal/command/ip/test_impl_pyroute2.py | 26 ++++++++++++++++++++-- .../command/ip/linux/test_impl_pyroute2.py | 9 ++++++++ playbooks/os-vif-ovs/run.yaml | 6 ++--- .../do-not-force-mac-ageing-c6e8d750130c5740.yaml | 13 +++++++++++ .../prevent-lb-reply-arp-6459133bfb056069.yaml | 8 +++++++ tox.ini | 3 ++- vif_plug_linux_bridge/linux_net.py | 17 ++++++++++++++ vif_plug_ovs/linux_net.py | 22 +++++++++++++++++- 15 files changed, 147 insertions(+), 22 deletions(-)