openstack/neutron — Week of 2026-08-08

OVN live migration. The headline work targets ML2/OVN live migration: a new mechanism now waits for ovn-controller to install OpenFlow rules before the source port is torn down, and a 500-line documentation drop describes the end-to-end flow. Related OVN backend work adds a plain VMAC port-security entry for VRRPv3, switches port bindings from LSP.tag to LSP.tag_request, standardizes boolean parsing via strutils.bool_from_string, and cleans a duplicate ConfigException in the metadata agent.

ML2/OVS and EVPN. A new ovs_create_tap flag lets the ML2/OVS mechanism driver create the tap device itself (skipped when hybrid plug is enabled). On the EVPN side, a dummy interface is now created per L3 VNI, and EVPN routers are restricted to the OVN router flavor.

Bug fixes. Cross-project attribution of OVN network-log drop events was reworked (~430 lines). An accidental removal of a router's external gateway info was fixed on master and backported. RBAC creation now validates target_project as a UUID or wildcard.

Maintenance. DB migrations shed the VPNaaS dead code, FWaaS v1 table creation, and redundant MTU backfill logic; the OVS/OVN minimum requirement matrix picks up 2026.1.