35d3ee2ac3
Iptables chain is linear storage and filtering, when iptables rules are large, the load of l2 agent is heavy, this patch introduces ipset to security group for improving the security group performance. Change-Id: I6ff0ac519d0b9034d3bb5270885ed3cc1805674d Implements: blueprint add-ipset-to-security DocImpact
72 lines
2.6 KiB
INI
72 lines
2.6 KiB
INI
[ml2]
|
|
# (ListOpt) List of network type driver entrypoints to be loaded from
|
|
# the neutron.ml2.type_drivers namespace.
|
|
#
|
|
# type_drivers = local,flat,vlan,gre,vxlan
|
|
# Example: type_drivers = flat,vlan,gre,vxlan
|
|
|
|
# (ListOpt) Ordered list of network_types to allocate as tenant
|
|
# networks. The default value 'local' is useful for single-box testing
|
|
# but provides no connectivity between hosts.
|
|
#
|
|
# tenant_network_types = local
|
|
# Example: tenant_network_types = vlan,gre,vxlan
|
|
|
|
# (ListOpt) Ordered list of networking mechanism driver entrypoints
|
|
# to be loaded from the neutron.ml2.mechanism_drivers namespace.
|
|
# mechanism_drivers =
|
|
# Example: mechanism_drivers = openvswitch,mlnx
|
|
# Example: mechanism_drivers = arista
|
|
# Example: mechanism_drivers = cisco,logger
|
|
# Example: mechanism_drivers = openvswitch,brocade
|
|
# Example: mechanism_drivers = linuxbridge,brocade
|
|
|
|
# (ListOpt) Ordered list of extension driver entrypoints
|
|
# to be loaded from the neutron.ml2.extension_drivers namespace.
|
|
# extension_drivers =
|
|
# Example: extension_drivers = anewextensiondriver
|
|
|
|
[ml2_type_flat]
|
|
# (ListOpt) List of physical_network names with which flat networks
|
|
# can be created. Use * to allow flat networks with arbitrary
|
|
# physical_network names.
|
|
#
|
|
# flat_networks =
|
|
# Example:flat_networks = physnet1,physnet2
|
|
# Example:flat_networks = *
|
|
|
|
[ml2_type_vlan]
|
|
# (ListOpt) List of <physical_network>[:<vlan_min>:<vlan_max>] tuples
|
|
# specifying physical_network names usable for VLAN provider and
|
|
# tenant networks, as well as ranges of VLAN tags on each
|
|
# physical_network available for allocation as tenant networks.
|
|
#
|
|
# network_vlan_ranges =
|
|
# Example: network_vlan_ranges = physnet1:1000:2999,physnet2
|
|
|
|
[ml2_type_gre]
|
|
# (ListOpt) Comma-separated list of <tun_min>:<tun_max> tuples enumerating ranges of GRE tunnel IDs that are available for tenant network allocation
|
|
# tunnel_id_ranges =
|
|
|
|
[ml2_type_vxlan]
|
|
# (ListOpt) Comma-separated list of <vni_min>:<vni_max> tuples enumerating
|
|
# ranges of VXLAN VNI IDs that are available for tenant network allocation.
|
|
#
|
|
# vni_ranges =
|
|
|
|
# (StrOpt) Multicast group for the VXLAN interface. When configured, will
|
|
# enable sending all broadcast traffic to this multicast group. When left
|
|
# unconfigured, will disable multicast VXLAN mode.
|
|
#
|
|
# vxlan_group =
|
|
# Example: vxlan_group = 239.1.1.1
|
|
|
|
[securitygroup]
|
|
# Controls if neutron security group is enabled or not.
|
|
# It should be false when you use nova security group.
|
|
# enable_security_group = True
|
|
|
|
# Use ipset to speed-up the iptables security groups. Enabling ipset support
|
|
# requires that ipset is installed on L2 agent node.
|
|
# enable_ipset = True
|