Bug 1042372 - [RFE][nova]: Make hairpin behavior for a VIF configurable
Summary: [RFE][nova]: Make hairpin behavior for a VIF configurable
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: RFEs
Version: unspecified
Hardware: Unspecified
OS: Unspecified
low
unspecified
Target Milestone: ---
: ---
Assignee: RHOS Maint
QA Contact: Ami Jeain
URL: https://blueprints.launchpad.net/nova...
Whiteboard: upstream_milestone_none upstream_stat...
Depends On:
Blocks: 1042638
TreeView+ depends on / blocked
 
Reported: 2013-12-12 21:55 UTC by RHOS Integration
Modified: 2019-09-09 17:01 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-03-19 17:17:22 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description RHOS Integration 2013-12-12 21:55:53 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/nova/+spec/nova-hairpin-vif-attribute.

Description:

Nova's libvirt driver currently enables hairpinning, which breaks IPv6. Nova's firewall drivers create rules to prevent IPv6 traffic from hairpinning, but when using Neutron for firewalling/security groups the packets return to the instance and break IPv6. Neutron should pass in an attribute for the VIF when hairpinning needs to be enabled for an interface. This means that when Neutron is being used, Libvirt should not enable hairpinning by default.

This blueprint is the result of a discussion that disables hairpinning in Nova's libvirt driver.

https://review.openstack.org/#/c/56381/

A blueprint has been registered on the Neutron side to return a VIF attribute that Nova will use.

https://blueprints.launchpad.net/neutron/+spec/vif-attribute-for-hairpinning

Specification URL (additional information):

None
Note You need to log in before you can comment on or make changes to this bug.