a246b5cb28
Adding the recommended configuration to the securitygroup configuration group in the ml2 agent configuration. This iptables_hybrid driver is recommended for the classic, provider and L3HA OVS scenarios here: http://docs.openstack.org/mitaka/networking-guide/deploy.html Change-Id: Ie9661d1095d0c9a95eec42537748bc14a7b01c28 Implements: blueprint support-openvswitch
42 lines
1.1 KiB
Django/Jinja
42 lines
1.1 KiB
Django/Jinja
# {{ ansible_managed }}
|
|
|
|
# ML2 general
|
|
[ml2]
|
|
type_drivers = {{ neutron_plugins[neutron_plugin_type].drivers_type }}
|
|
tenant_network_types = {{ neutron_provider_networks.network_types }}
|
|
mechanism_drivers = {{ neutron_plugins[neutron_plugin_type].mechanisms }}
|
|
extension_drivers = port_security{% if 'qos' in neutron_plugin_base %},qos{% endif %}
|
|
|
|
{% if neutron_provider_networks.network_flat_networks is defined %}
|
|
|
|
# ML2 flat networks
|
|
[ml2_type_flat]
|
|
flat_networks = {{ neutron_provider_networks.network_flat_networks }}
|
|
|
|
{% endif %}
|
|
|
|
{% if neutron_provider_networks.network_vlan_ranges is defined %}
|
|
|
|
# ML2 VLAN networks
|
|
[ml2_type_vlan]
|
|
network_vlan_ranges = {{ neutron_provider_networks.network_vlan_ranges }}
|
|
|
|
{% endif %}
|
|
|
|
{% if neutron_provider_networks.network_vxlan_ranges is defined %}
|
|
|
|
# ML2 VXLAN networks
|
|
[ml2_type_vxlan]
|
|
vxlan_group = {{ neutron_vxlan_group }}
|
|
vni_ranges = {{ neutron_provider_networks.network_vxlan_ranges }}
|
|
|
|
{% endif %}
|
|
|
|
# Security groups
|
|
[securitygroup]
|
|
{% if neutron_plugin_type == 'ml2.ovs' %}
|
|
firewall_driver = iptables_hybrid
|
|
{% endif %}
|
|
enable_security_group = True
|
|
enable_ipset = True
|