461788fdf9
In Ubuntu 16.04 the updated kernel that is shipped has conntrack support. The inclusion of conntrack led to a new firewall driver that removed the need for hybrid vif plugging. Hybrid vif plugging allowed security groups to operate properly, but led to significant performance degradation's when paired with OVS. Since the inclusion of OVS for the PowerVM driver occurred during the OpenStack Newton release, it aligned well with the Ubuntu 16.04 release. As such, the PowerVM driver team did not enable hybrid vif plugging, but instead focused on standard plugging. This change set allows an option to turn off the hybrid vif plugging (for all architectures), but will automatically detect it for PowerVM and turn it off. This will enable deployments on newer operating systems to have higher network I/O performance. Change-Id: I0801b0d6925a0d3c0ae9b14d38310d5906355b98 Partially-Implements: blueprint powervm-virt-driver
19 lines
664 B
YAML
19 lines
664 B
YAML
---
|
|
features:
|
|
- |
|
|
The ``os_neutron`` role will now default to the OVS firewall driver when
|
|
``neutron_plugin_type`` is ``ml2.ovs`` and the host is running Ubuntu
|
|
16.04 on PowerVM. To override this default behavior, deployers should
|
|
define ``neutron_ml2_conf_ini_overrides`` and
|
|
'neutron_openvswitch_agent_ini_overrides' in 'user_variables.yml'. Example
|
|
below
|
|
|
|
::
|
|
|
|
neutron_ml2_conf_ini_overrides:
|
|
securitygroup:
|
|
firewall_driver: neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
|
|
neutron_openvswitch_agent_ini_overrides:
|
|
securitygroup:
|
|
firewall_driver: iptables_hybrid
|