openstack/openstack-ansible-os_neutron
Code Issues Proposed changes

Configure ml2 firewall driver "iptables_hybrid" for OVS

Browse Source 
Adding the recommended configuration to the securitygroup
configuration group in the ml2 agent configuration.

This iptables_hybrid driver is recommended for the classic,
provider and L3HA OVS scenarios here:
http://docs.openstack.org/mitaka/networking-guide/deploy.html

Change-Id: Ie9661d1095d0c9a95eec42537748bc14a7b01c28
Implements: blueprint support-openvswitch
This commit is contained in:
Travis Truman 2016-06-22 11:44:27 -04:00
parent 88f5efcae4
commit a246b5cb28
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/plugins/ml2/ml2_conf.ini.j2
View File

@ -34,5 +34,8 @@ vni_ranges = {{ neutron_provider_networks.network_vxlan_ranges }}
# Security groups
[securitygroup]
{% if neutron_plugin_type == 'ml2.ovs' %}
firewall_driver = iptables_hybrid
{% endif %}
enable_security_group = True
enable_ipset = True