mirror of
https://github.com/OpenNebula/one.git
synced 2025-03-20 10:50:08 +03:00
Update OpenvSwitch.rb
Block ARP cache poisoning in openvswitch
This commit is contained in:
parent
28ebcdfc08
commit
13f4ff0cdb
@ -80,6 +80,8 @@ class OpenvSwitchVLAN < OpenNebulaNetwork
|
||||
end
|
||||
|
||||
def mac_spoofing
|
||||
add_flow("in_port=#{port},arp,dl_src=#{@nic[:mac]}",:drop,45000)
|
||||
add_flow("in_port=#{port},arp,dl_src=#{@nic[:mac]},nw_src=#{@nic[:ip]}",:normal,46000)
|
||||
add_flow("in_port=#{port},dl_src=#{@nic[:mac]}",:normal,40000)
|
||||
add_flow("in_port=#{port}",:drop,39000)
|
||||
end
|
||||
|
Loading…
x
Reference in New Issue
Block a user