![Adit Sarfaty](/assets/img/avatar_default.png)
For the initialization of the service insertion, we need the "before spawn" callback added in I249ba32dede16e61b1c757a8010dac610484da4f Change-Id: Ifde507b7c9be7f6a12c02ca3a93079751d803b1a
Enabling NSX Flow Classifier for service insertion in DevStack
Download DevStack
Update the
local.conf
file:[[local|localrc]] enable_plugin networking-sfc https://git.openstack.org/openstack/networking-sfc master [[post-config|$NEUTRON_CONF]] [DEFAULT] service_plugins = networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin [flowclassifier] drivers = vmware-nsxv-sfc [nsxv] service_insertion_profile_id = <service profile id. i.e. serviceprofile-1>
In order to prevent tenants from changing the flow classifier, please add the following lines to the policy.json file:
"create_flow_classifier": "rule:admin_only", "update_flow_classifier": "rule:admin_only", "delete_flow_classifier": "rule:admin_only", "get_flow_classifier": "rule:admin_only"
run
stack.sh