5f7efbf47c
implements bp quantum-security-groups-iptables-ovs - Adding [SECURITYGROUP] firewall_driver to the conf - Adding NoopFirewallDriver - Adding OVSHybridIptablesFirewallDriver - Refactoring security group code to support OVS plugin Change-Id: I7aabc296265afc47d938121543ace57cce6cc521
128 lines
4.8 KiB
INI
128 lines
4.8 KiB
INI
[DATABASE]
|
|
# This line MUST be changed to actually run the plugin.
|
|
# Example:
|
|
# sql_connection = mysql://root:nova@127.0.0.1:3306/ovs_quantum
|
|
# Replace 127.0.0.1 above with the IP address of the database used by the
|
|
# main quantum server. (Leave it as is if the database runs on this host.)
|
|
sql_connection = sqlite://
|
|
# Database reconnection retry times - in event connectivity is lost
|
|
# set to -1 implies an infinite retry count
|
|
# sql_max_retries = 10
|
|
# Database reconnection interval in seconds - if the initial connection to the
|
|
# database fails
|
|
reconnect_interval = 2
|
|
# Enable the use of eventlet's db_pool for MySQL. The flags sql_min_pool_size,
|
|
# sql_max_pool_size and sql_idle_timeout are relevant only if this is enabled.
|
|
# sql_dbpool_enable = False
|
|
# Minimum number of SQL connections to keep open in a pool
|
|
# sql_min_pool_size = 1
|
|
# Maximum number of SQL connections to keep open in a pool
|
|
# sql_max_pool_size = 5
|
|
# Timeout in seconds before idle sql connections are reaped
|
|
# sql_idle_timeout = 3600
|
|
|
|
[OVS]
|
|
# (StrOpt) Type of network to allocate for tenant networks. The
|
|
# default value 'local' is useful only for single-box testing and
|
|
# provides no connectivity between hosts. You MUST either change this
|
|
# to 'vlan' and configure network_vlan_ranges below or change this to
|
|
# 'gre' and configure tunnel_id_ranges below in order for tenant
|
|
# networks to provide connectivity between hosts. Set to 'none' to
|
|
# disable creation of tenant networks.
|
|
#
|
|
# Default: tenant_network_type = local
|
|
# Example: tenant_network_type = gre
|
|
|
|
# (ListOpt) Comma-separated list of
|
|
# <physical_network>[:<vlan_min>:<vlan_max>] tuples enumerating ranges
|
|
# of VLAN IDs on named physical networks that are available for
|
|
# allocation. All physical networks listed are available for flat and
|
|
# VLAN provider network creation. Specified ranges of VLAN IDs are
|
|
# available for tenant network allocation if tenant_network_type is
|
|
# 'vlan'. If empty, only gre and local networks may be created.
|
|
#
|
|
# Default: network_vlan_ranges =
|
|
# Example: network_vlan_ranges = physnet1:1000:2999
|
|
|
|
# (BoolOpt) Set to True in the server and the agents to enable support
|
|
# for GRE networks. Requires kernel support for OVS patch ports and
|
|
# GRE tunneling.
|
|
#
|
|
# Default: enable_tunneling = False
|
|
|
|
# (ListOpt) Comma-separated list of <tun_min>:<tun_max> tuples
|
|
# enumerating ranges of GRE tunnel IDs that are available for tenant
|
|
# network allocation if tenant_network_type is 'gre'.
|
|
#
|
|
# Default: tunnel_id_ranges =
|
|
# Example: tunnel_id_ranges = 1:1000
|
|
|
|
# Do not change this parameter unless you have a good reason to.
|
|
# This is the name of the OVS integration bridge. There is one per hypervisor.
|
|
# The integration bridge acts as a virtual "patch bay". All VM VIFs are
|
|
# attached to this bridge and then "patched" according to their network
|
|
# connectivity.
|
|
#
|
|
# Default: integration_bridge = br-int
|
|
|
|
# Only used for the agent if tunnel_id_ranges (above) is not empty for
|
|
# the server. In most cases, the default value should be fine.
|
|
#
|
|
# Default: tunnel_bridge = br-tun
|
|
|
|
# Peer patch port in integration bridge for tunnel bridge
|
|
# int_peer_patch_port = patch-tun
|
|
|
|
# Peer patch port in tunnel bridge for integration bridge
|
|
# tun_peer_patch_port = patch-int
|
|
|
|
# Uncomment this line for the agent if tunnel_id_ranges (above) is not
|
|
# empty for the server. Set local-ip to be the local IP address of
|
|
# this hypervisor.
|
|
#
|
|
# Default: local_ip =
|
|
|
|
# (ListOpt) Comma-separated list of <physical_network>:<bridge> tuples
|
|
# mapping physical network names to the agent's node-specific OVS
|
|
# bridge names to be used for flat and VLAN networks. The length of
|
|
# bridge names should be no more than 11. Each bridge must
|
|
# exist, and should have a physical network interface configured as a
|
|
# port. All physical networks listed in network_vlan_ranges on the
|
|
# server should have mappings to appropriate bridges on each agent.
|
|
#
|
|
# Default: bridge_mappings =
|
|
# Example: bridge_mappings = physnet1:br-eth1
|
|
|
|
[AGENT]
|
|
# Agent's polling interval in seconds
|
|
polling_interval = 2
|
|
|
|
[SECURITYGROUP]
|
|
# Firewall driver for realizing quantum security group function
|
|
# firewall_driver = quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
|
|
|
|
#-----------------------------------------------------------------------------
|
|
# Sample Configurations.
|
|
#-----------------------------------------------------------------------------
|
|
#
|
|
# 1. With VLANs on eth1.
|
|
# [DATABASE]
|
|
# sql_connection = mysql://root:nova@127.0.0.1:3306/ovs_quantum
|
|
# [OVS]
|
|
# network_vlan_ranges = default:2000:3999
|
|
# tunnel_id_ranges =
|
|
# integration_bridge = br-int
|
|
# bridge_mappings = default:br-eth1
|
|
# [AGENT]
|
|
# Add the following setting, if you want to log to a file
|
|
#
|
|
# 2. With tunneling.
|
|
# [DATABASE]
|
|
# sql_connection = mysql://root:nova@127.0.0.1:3306/ovs_quantum
|
|
# [OVS]
|
|
# network_vlan_ranges =
|
|
# tunnel_id_ranges = 1:1000
|
|
# integration_bridge = br-int
|
|
# tunnel_bridge = br-tun
|
|
# local_ip = 10.0.0.3
|