We eagerly announce the release of: neutron 15.3.1: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.3.1 ^^^^^^ New Features ************ * "DVR" routers now support "flat" networks. Bug Fixes ********* * Fixed bug 1876092 (https://bugs.launchpad.net/neutron/+bug/1876092) which caused DUP ICMP replies on the "flat" networks used with "DVR" routers. * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637). Changes in neutron 15.3.0..15.3.1 --------------------------------- cce4120e5d Revert "[Security] fix allowed-address-pair 0.0.0.0/0 issue" bf8fc2db0c Fix removal of dvr-src mac flows when non-gateway port on router is deleted f65bea4943 Ensure "keepalived" is correcly disabled 3b6cf23aa3 Neutron ovs agent: set mtu of smartnic port 9c1f940d82 Don't fail if FIP is not in port forwarding cache during cleaning c121b1caa9 Add WaitForPortCreateEvent in BaseOVSTestCase 4f06660447 Randomize port name in "BaseOVSTestCase" ef37b3a39a Dropping lower constraints testing (stable Train) 80abfca487 [GRE] Add possibility to create GRE tunnels over IPv6 cf4d045ac5 Improve the CIDRs overlap check method for router add interface 03f0a832a8 Fix OVS conjunctive IP flows cleanup c9416b1013 [train] Fix tests with new pip resolver a5d8623a2a Flush ebtables arp protect chains before deleting them 0f77298775 Fix calling of add_tunnel_port method from sanity checks module 4de2221853 Fix migration from the HA to non-HA routers 0e6a429158 Rehome api tests for propagate_uplink_status dea24403a7 Fix ovs agent, avoiding import error 9c08212576 Fix formatting error in agent/linux/external_process.py fd22aad5c2 Switch tripleo standalone job to content provider c06895e8e7 Local mac direct flow for non-openflow firewall cbb949379c ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 4ef6566b6d "scope" conversion only just before pyroute2 method call ae74b483c3 Make NeutronOvsdbIdl singleton 86463bd822 [Functional] Add logging to the check test file function 35eddd53f9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec a9af91846a Import "oslo_config.cfg" before "eventlet" bcc21b306d windows: fix terminating processes bfa14f7f29 Support gateway which is not in subnet CIDR in ha_router 8654eb2d18 Default dnsmasq --conf-file to /dev/null 84d38f342b Ensure fip ip rules deleted when fip removed 468bc1989a Make DVR router support FLAT network for ovs-agent Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +- TESTING.rst | 6 +- lower-constraints.txt | 154 ------------ neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/dvr_fip_ns.py | 3 + neutron/agent/l3/dvr_local_router.py | 27 ++- neutron/agent/l3/extensions/port_forwarding.py | 6 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 71 ++++-- neutron/agent/linux/openvswitch_firewall/rules.py | 6 - neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 6 +- neutron/cmd/sanity/checks.py | 22 +- neutron/common/utils.py | 12 + neutron/db/l3_db.py | 15 +- neutron/db/securitygroups_rpc_base.py | 23 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/linuxbridge/agent/common/constants.py | 3 - .../drivers/openvswitch/agent/common/constants.py | 25 +- .../openvswitch/agent/openflow/native/br_int.py | 37 +-- .../openvswitch/agent/openflow/native/br_phys.py | 8 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 121 ++++++---- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 206 ++++++++++------ .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../linux/openvswitch_firewall/test_firewall.py | 97 +++++--- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_iptables_firewall.py | 22 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 +- .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 115 +++++++-- .../agent/openflow/native/test_br_phys.py | 6 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 260 ++++++++++++++++++--- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ ...port-flat-network-for-ovs-fdf8c3eb461426ec.yaml | 9 + ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + requirements.txt | 6 +- test-requirements.txt | 2 +- tox.ini | 8 - 68 files changed, 1430 insertions(+), 566 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4ba3f71160..d86abeb51a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ Routes>=2.3.1 # MIT -debtcollector>=1.2.0 # Apache-2.0 +debtcollector>=1.19.0 # Apache-2.0 @@ -24 +24 @@ WebOb>=1.8.2 # MIT -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 @@ -49 +49 @@ ovs>=2.8.0 # Apache-2.0 -ovsdbapp>=0.9.1 # Apache-2.0 +ovsdbapp>=0.12.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5f4a05d6b1..a1ec3b6e20 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0