Skip to content

Conversation

@tamilmani1989
Copy link
Member

What this PR does / why we need it:
Addressing security concerns in Linux Multi tenancy. This PR does following:

  1. Prevent ovs bridge broadcasting packets to all container interfaces by modifying it to forward to particular port.
  2. Allow packets to go through only it comes from right source IP. (IP Spoofing)

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #

Special notes for your reviewer:

Release note:

@codecov
Copy link

codecov bot commented Aug 14, 2019

Codecov Report

Merging #387 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #387   +/-   ##
=======================================
  Coverage   40.17%   40.17%           
=======================================
  Files          25       25           
  Lines        3547     3547           
=======================================
  Hits         1425     1425           
  Misses       1920     1920           
  Partials      202      202

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 76cab93...71c2047. Read the comment docs.

)

// Open flow rule priorities. Higher the number higher the priority
const (
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

consider adding priority to the name and switch to enum?

@tamilmani1989 tamilmani1989 merged commit d7320a9 into Azure:master Aug 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants