We are chuffed to announce the release of: neutron 9.4.0: OpenStack Networking This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 9.4.0 ^^^^^ Keepalived VRRP health check functionality to enable verification of connectivity from the "master" router to all gateways. New Features ************ * Activation of this feature enables gateway connectivity validation and rescheduling of the "master" router to another node when connectivity is lost. If all routers lose connectivity to the gateways, the election process will be repeated round-robin until one of the routers restores its gateway connection. In the mean time, all of the routers will be reported as "master". Changes in neutron 9.3.1..9.4.0 ------------------------------- 8c624ad Fixed Attribute error in fullstack l3 tests 7c2e051 Fixed docs job failure 7cfa858 Allow port security updates even without security-groups enabled 3567667 Get rid of custom wrap_db_retry call in sync_allocations 5f3552e Send both gratuitous ARP REQUESTs and REPLYs b98267f Avoid router ri.process if initialize() fails 09c2e15 DVR: Do not check HA state on DVR-only routers 7534c00 Retrieve fresh network DB data before getting it in ml2 a2f07de Add IPv6 Prefix Delegation support for DVR d8c495c Wait 2 seconds between gratuitous ARP updates instead of 1 second bd7055d Allow offloading lookups in driver contexts 1361f55 Scan for mac through all devices f142cde Move conntrack zones to IPTablesFirewall 4f01368 Stop killing conntrack state without CT Zone 7cbb448 Clear conntrack entries without zones if CT zones are not used 636d4a5 DVR: Don't clean snat-ns of DVR HA router when fullsync 7ae6e56 Fix duplicated sg rules check for remote_ip_prefix acb1dfb Use correct retry mechanism in tags 4e886b1 IP Conntrack Manager changes for FWaaS v2 128ebb0 Simplify RootHelperProcess._read_stream() f6ae49b Pass --concurrent flag to ebtables calls 308795e Add IPAllocations to the port fixed_ips 6b11276 fullstack: Compile openvswitch module for fullstack test 37de2f6 Lock in DHCP agent based on network_id 44c3ee8 Dont try to apply iptables rules in a endless loop fe7e49a Ensure behavior of None for device_id ef65c9c Allow self-sharing RBAC rules to be deleted without usage check 723df14 Ignore gre devices when fetching devices in test_cleanup_stale_devices ce81ba1 Fix tempest router timestamp test when HA enabled 4143a39 Print useful error on rootwrap daemon failure e6f5b40 Assert contents of returned devices in test 4a96b96 Get rid of delete_subnet method in ML2 01b3733 Add support for Keepalived VRRP health check 634d7b0 Set OVS inactivity_probe to vsctl_timeout when adding manager 4c9e3ed Clean up ovsdb-native's use of verify() a1186b9 Remove stale floating IP addresses from rfp devices 757d3c0 Handle auto-address subnets on port update c90f3a0 Switch RootHelperProcess from select.poll to select.select Diffstat (except docs and test files) ------------------------------------- TESTING.rst | 2 - devstack/lib/ovs | 108 +++++-- neutron/agent/common/ovs_lib.py | 19 +- neutron/agent/dhcp/agent.py | 88 ++++-- neutron/agent/l3/agent.py | 25 +- neutron/agent/l3/dvr_edge_router.py | 3 + neutron/agent/l3/dvr_fip_ns.py | 16 + neutron/agent/l3/ha.py | 12 + neutron/agent/l3/ha_router.py | 16 +- neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/interface.py | 4 +- neutron/agent/linux/ip_conntrack.py | 114 ++++++- neutron/agent/linux/ip_lib.py | 62 ++-- neutron/agent/linux/iptables_firewall.py | 161 +++------- neutron/agent/linux/iptables_manager.py | 16 +- neutron/agent/linux/keepalived.py | 116 ++++++- neutron/agent/linux/pd.py | 21 +- neutron/agent/linux/utils.py | 6 +- neutron/agent/ovsdb/native/commands.py | 95 +++--- neutron/agent/ovsdb/native/connection.py | 3 +- neutron/agent/ovsdb/native/helpers.py | 9 +- neutron/common/constants.py | 5 + neutron/db/db_base_plugin_common.py | 12 +- neutron/db/db_base_plugin_v2.py | 112 ++++--- neutron/db/ipam_pluggable_backend.py | 37 ++- neutron/db/securitygroups_db.py | 20 +- neutron/plugins/ml2/driver_context.py | 16 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 2 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 6 +- neutron/plugins/ml2/drivers/type_tunnel.py | 5 +- neutron/plugins/ml2/plugin.py | 166 ++-------- neutron/services/tag/tag_plugin.py | 5 +- .../api/admin/test_shared_network_extension.py | 23 ++ .../unit/agent/linux/test_iptables_firewall.py | 352 ++++++++++++++------- .../unit/agent/linux/test_iptables_manager.py | 14 + .../agent/test_linuxbridge_neutron_agent.py | 4 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 4 +- ...epalived-vrrp-healt-check-f23ed7c853151484.yaml | 11 + 64 files changed, 1890 insertions(+), 693 deletions(-)