We jubilantly announce the release of: neutron 12.1.1: OpenStack Networking This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 12.1.1 ^^^^^^ Security Issues *************** * The OVS Firewall blocks traffic that does not have either the IPv4 or IPv6 ethertypes at present. This is a behavior change compared to the iptables_hybrid firewall, which only operates on IP packets and thus does not address other ethertypes. There is now a configuration option in the neutron openvswitch agent configuration file for permitted ethertypes and then ensures that the requested ethertypes are permitted on initialization. Bug Fixes ********* * When updating the fixed-ips of a port residing on a routed provider network the port update would always fail if *host* was not set. See bug: 1844124 (https://bugs.launchpad.net/tripleo/+bug/1844124). Changes in neutron 12.1.0..12.1.1 --------------------------------- 9b0919e648 raise priority of dead vlan drop 1bab70f909 fixed_configured=True when Add/Remove port IPs 9117f8b6c4 [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled 99eaf3eeee OVS flows for custom ethertypes must be on EGRESS 7190771867 Avoid unnecessary operation of ovsdb and flows 17f3b75007 Fix creation of vlan network with segmentation_id set to 0 e7b0b44273 Add info log about ready DHCP config for ports 261880aea5 Check the namespace is ready in test_mtu_update tests a28fc26aaa Increase timeouts for OVSDB in functional tests 05a07662bb Use created subnet in port generator in "test_port_ip_update_revises" 57725fc7d4 Increase TestDhcpAgentHA.agent_down_time to 30 seconds 8167fb944e Increase number of retries in _process_trunk_subport_bindings 46f0bdd4c7 Remove experimental openSUSE 42.3 job 6618a917d8 Initialize phys bridges before setup_rpc f7e100d33f Populate binding levels when concurrent ops fail e4b8795c23 Clear skb mark on encapsulating packets f2176cade1 Stop OVS agent before starting it again eabe3b707a Make sure the port still in port map when prepare_port_filter 99602ab15b [DVR] Add lock during creation of FIP agent gateway port 9aa7b045d7 Fix sort issue in test_dhcp_agent_scheduler.test_filter_bindings 2318a60046 Check for agent restarted after checking for DVR port a0ac712a35 fix update port bug 10191fd817 Retry trunk status updates failing with StaleDataError fa2863be86 Don't crash ovs agent during reconfigure of phys bridges 2a51cbb871 Filter placement API endpoint by type too 7ec7fd8fdf Use --bind-dynamic with dnsmasq instead of --bind-interfaces 639f5788bf Yield control to other greenthreads while processing trusted ports cd033bee07 Limit max ports per rpc for dhcp_ready_on_ports() 51d71097c9 Add custom ethertype processing 9dc82e9067 Treat networks shared by RBAC in same way as shared with all tenants 4ecfdb6fd0 Turn CIDR in query filter into proper subnet Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 --- neutron/agent/common/ovs_lib.py | 1 + neutron/agent/dhcp/agent.py | 11 ++- neutron/agent/linux/dhcp.py | 8 +-- neutron/agent/linux/ip_lib.py | 16 ++++- .../agent/linux/openvswitch_firewall/firewall.py | 31 ++++++++- neutron/conf/agent/securitygroups_rpc.py | 8 ++- neutron/db/db_base_plugin_common.py | 6 ++ neutron/db/ipam_pluggable_backend.py | 2 +- neutron/db/l3_dvr_db.py | 76 +++++++++++--------- .../drivers/openvswitch/agent/common/constants.py | 2 + .../openvswitch/agent/openflow/native/br_int.py | 3 + .../openvswitch/agent/openflow/ovs_ofctl/br_int.py | 3 + .../drivers/openvswitch/agent/ovs_neutron_agent.py | 31 +++++++-- neutron/plugins/ml2/drivers/type_vlan.py | 4 +- neutron/plugins/ml2/plugin.py | 18 ++++- neutron/plugins/ml2/rpc.py | 20 +++--- neutron/policy.py | 6 +- neutron/privileged/agent/linux/ip_lib.py | 7 ++ neutron/services/segments/placement_client.py | 1 + neutron/services/trunk/rpc/server.py | 22 ++++-- .../linux/openvswitch_firewall/test_firewall.py | 1 + .../agent/openflow/native/test_br_int.py | 6 ++ .../agent/openflow/ovs_ofctl/test_br_int.py | 2 + .../openvswitch/agent/test_ovs_neutron_agent.py | 78 +++++++++++++++++++-- .../unit/plugins/ml2/drivers/test_type_vlan.py | 21 ++++-- .../unit/scheduler/test_dhcp_agent_scheduler.py | 8 ++- .../services/revisions/test_revision_plugin.py | 2 +- .../notes/custom_ethertypes-eae3fcab3293e3a1.yaml | 9 +++ ...-routed-provider-networks-c54a54844d9a3926.yaml | 7 ++ 49 files changed, 707 insertions(+), 112 deletions(-)