noironetworks
/
opflex
/
354
68%
|
Ran
|
Jobs
1
|
Files
253
|
Run time
15s
|
Badge
Embed ▾
README BADGES
|
push
travis-ci
Tom Flynn
Do not add L34 flows if remotesub missing This bug was reported by Cisco IT where a secgrp with no remote subnets basically allows all ingress traffic due to how we program the rules. Since this is a day 0 issue we decided to fix the behavior while at the same time providing an option for someone to revert to the old behavior. - If remote subnet is missing do not add L3 and L4 flows - A new function add_l2classifier_entries takes care of adding l2 only flows - Add : "behavior": { "l34flows-without-subnet" : true } to opflex config to override this behavior with old, default is false. - verified make check passes with / without this option since I added default 0.0.0.0/0 ::/0 subnet to relevant secgroups. Signed-off-by: Madhu Challa <challa@gmail.com> Change-Id: Iffa03301c
19930 of 26526 relevant lines covered (75.13%)
3496.31 hits per line
Jobs
| ID | Job ID | Ran | Files | Coverage | |
|---|---|---|---|---|---|
| 1 | 354.1 | 0 |
75.13 |
Travis Job 354.1 |
Source Files on build 354
Detailed source file information is not available for this build.