openstack-ansible-os_neutron/templates/plugins/ml2/linuxbridge_agent.ini.j2
Jesse Pretorius b5c3c0975d Enable Neutron prevent_arp_spoofing by default
This patch changes the linuxbridge agent configuration to respect
the upstream value for prevent_arp_spoofing, which is True.

Note:
This should only be backported to Liberty for a minor release as
this is a major functional change in the way that instances connect
to networks.

UpgradeImpact
Closes-Bug: #1522379
Change-Id: I13d697cb78b6df35c4d75168b0e662ecbc8ebde8
2016-01-14 10:21:52 +00:00

33 lines
735 B
Django/Jinja

# {{ ansible_managed }}
# Linux bridge agent physical interface mappings
[linux_bridge]
{% if neutron_provider_networks.network_mappings is defined %}
physical_interface_mappings = {{ neutron_provider_networks.network_mappings }}
{% endif %}
# Linux bridge agent VXLAN networks
[vxlan]
{% if neutron_vxlan_enabled | bool %}
enable_vxlan = True
vxlan_group = {{ neutron_vxlan_group }}
# VXLAN local tunnel endpoint
local_ip = {{ neutron_local_ip }}
l2_population = {{ neutron_l2_population }}
{% else %}
# Disable VXLAN for deployments with only flat or VLAN networks
enable_vxlan = False
{% endif %}
# Agent
[agent]
# Security groups
[securitygroup]
firewall_driver = {{ neutron_driver_firewall }}
enable_security_group = True