[Openstack] [NEUTRON][DHCP] iptables chain rate limit dhcp connection

Brian Haley brian.haley at hpe.com
Tue Jan 3 14:21:28 UTC 2017


On 12/31/2016 03:58 AM, Davide Panarese wrote:
> Sorry Gary,
> i don’t use this driver and however i can’t find in the code.

The upstream neutron code does not add these rules, so they are either in a 
driver or vendor-specific distro code.

-Brian


>> On 30 Dec 2016, at 20:00, Gary Kotton <gkotton at vmware.com> wrote:
>>
>> https://github.com/openstack/vmware-nsx
>>
>> On 12/30/16, 6:36 PM, "Davide Panarese" <dpanarese at enter.eu> wrote:
>>
>>    Hello everyone,
>>    anyone know where is the source code of neutron that create seguent CHAIN in iptables into dhcp namespaces?
>>
>>    -A INPUT -p udp -m udp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_UDP -j DROP
>>    -A INPUT -p tcp -m tcp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_TCP -j DROP
>>
>>    Thanks a lot
>>
>>    Davide
>>    _______________________________________________
>>    Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>    Post to     : openstack at lists.openstack.org
>>    Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>> _______________________________________________
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>> --
>> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.
>> Seguire il link qui sotto per segnalarlo come spam:
>> http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=086555DF5A.A970F
>>
>>
>
>
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>





More information about the Openstack mailing list