openstack-ansible-os_neutron/tasks/neutron_ml2_ovs_powervm.yml
Qing Wu Wang 461788fdf9 Enable higher performance I/O through
In Ubuntu 16.04 the updated kernel that is shipped has conntrack support.
The inclusion of conntrack led to a new firewall driver that removed the
need for hybrid vif plugging. Hybrid vif plugging allowed security groups
to operate properly, but led to significant performance degradation's
when paired with OVS.

Since the inclusion of OVS for the PowerVM driver occurred during the
OpenStack Newton release, it aligned well with the Ubuntu 16.04 release.
As such, the PowerVM driver team did not enable hybrid vif plugging, but
instead focused on standard plugging.

This change set allows an option to turn off the hybrid vif plugging
(for all architectures), but will automatically detect it for PowerVM
and turn it off.  This will enable deployments on newer operating systems
to have higher network I/O performance.

Change-Id: I0801b0d6925a0d3c0ae9b14d38310d5906355b98
Partially-Implements: blueprint powervm-virt-driver
2016-07-20 14:59:44 -04:00

27 lines
947 B
YAML

---
# Copyright 2016, IBM Corp.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Override neutron ovs driver firewall type
set_fact:
neutron_ml2_conf_ini_overrides:
securitygroup:
firewall_driver: "openvswitch"
- name: Override neutron ovs driver firewall
set_fact:
neutron_openvswitch_agent_ini_overrides:
securitygroup:
firewall_driver: "neutron.agent.linux.openvswitch_firewall.OVSFirewallDriver"