Skip to content

Commit

Permalink
Add IPv6 address of metadata service to sg rules
Browse files Browse the repository at this point in the history
So far only DHCPv6 and ICMPv6 traffic is refelcted in the default
infrastructure rules of NSX-T. The IPv6 address of the metadata
service requires clearing as well.
  • Loading branch information
sven-rosenzweig committed Jul 4, 2024
1 parent 72eac47 commit e0afa85
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@

import neutron_lib.constants as neutron_constants

# IP_PROTOCOL_NUMBERS source
# https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
Expand Down Expand Up @@ -233,7 +233,7 @@
"id": "HTTP",
"display_name": "HTTP",
"source_groups": ["ANY"],
"destination_groups": ["169.254.169.254"],
"destination_groups": [neutron_constants.METADATA_V4_IP, neutron_constants.METADATA_V6_IP],
"services": ["/infra/services/HTTP"],
"service_entries": [],
"profiles": ["ANY"],
Expand Down

0 comments on commit e0afa85

Please sign in to comment.