Hi, I'd like you to take a look at this patch for potential SecurityImpact. https://review.openstack.org/201650 Log: commit 9ab79bbb66e0868aea15a24a3a8799cea3412221 Author: sridhargaddam <sridhar.gaddam at enovance.com> Date: Tue Jul 14 16:18:06 2015 +0000 Add IPv6 Address Resolution protection Similar to IPv4 arp protection support, this patch adds the necessary OVS rules to prevent ports attached to agent from sending any icmpv6 neighbor advertisement messages that contain an IPv6 address not belonging to the port. For details please refer to "Figure 3. Attack against IPv6 Address Resolution" http://www.cisco.com/web/about/security/intelligence/ipv6_first_hop.html Pending items: Functional tests. DocImpact SecurityImpact Partial-Bug: #1274034 Change-Id: I1f8311f1b9ae1be02afde3e9078e49c6da373a88