Bug 6089: Fix to drop Tcp Syn packets after default SG removed. 28/43228/7
authorbharathi.m <bharathi.m@hcl.com>
Sat, 6 Aug 2016 01:06:27 +0000 (21:06 -0400)
committerBharathi M <bharathi.m@hcl.com>
Fri, 12 Aug 2016 13:01:24 +0000 (13:01 +0000)
commit9c1ef714630b48078dc7ac01a1ea4f5395ba510a
treef734dae5380e39642ce63105ab30fc0876e15591
parent1f82e6d52086a61671f3f33879d3b73abaf8ace2
Bug 6089: Fix to drop Tcp Syn packets after default SG removed.

 * Removed rule to check legitimate ip/mac pair during
   VM creation because incoming Tcp packets matches this
   rule and it passing packets to next pipeline.
   "cookie=0x0, duration=45.414s, table=40, n_packets=0, n_bytes=0,
   priority=36001,ip,in_port=12,dl_src=fa:16:3e:49:06:f1,nw_src=10.0.0.2
   actions=goto_table:50"
 * Support added for Tcp Syn drop rule in Egress table.

Change-Id: Ifa0e8cb122c16dd12f5d94c98a187dc604bd8c87
Signed-off-by: bharathi.m <bharathi.m@hcl.com>
openstack/net-virt-providers/src/main/java/org/opendaylight/netvirt/openstack/netvirt/providers/openflow13/services/EgressAclService.java
openstack/net-virt-providers/src/main/java/org/opendaylight/netvirt/openstack/netvirt/providers/openflow13/services/IngressAclService.java
openstack/net-virt/src/main/java/org/opendaylight/netvirt/openstack/netvirt/api/Constants.java