f22e6e9d1e
Neutron has supported use of a native openvswitch firewall driver for a few releases; OpenStack Mitaka on Ubuntu 16.04 has the required kernel and openvswitch versions to support this feature. Add a new firewall-driver configuration option to support use of the openvswitch native firewall; the default remains as the iptables_hybrid driver, and users can switch to the openvswitch driver if they are deployed on Ubuntu Xenial or later. Change-Id: I4c228c5cbbff7f9673c1028ee4b075edba1fdc13 Closes-Bug: 1681890
31 lines
903 B
INI
31 lines
903 B
INI
# mitaka
|
|
###############################################################################
|
|
# [ WARNING ]
|
|
# Configuration file maintained by Juju. Local changes may be overwritten.
|
|
# Config managed by neutron-openvswitch charm
|
|
###############################################################################
|
|
[ovs]
|
|
enable_tunneling = True
|
|
local_ip = {{ local_ip }}
|
|
bridge_mappings = {{ bridge_mappings }}
|
|
{% if enable_dpdk -%}
|
|
datapath_type = netdev
|
|
{% endif -%}
|
|
|
|
[agent]
|
|
tunnel_types = {{ overlay_network_type }}
|
|
l2_population = {{ l2_population }}
|
|
enable_distributed_routing = {{ distributed_routing }}
|
|
prevent_arp_spoofing = {{ prevent_arp_spoofing }}
|
|
{% if veth_mtu -%}
|
|
veth_mtu = {{ veth_mtu }}
|
|
{% endif -%}
|
|
|
|
[securitygroup]
|
|
{% if neutron_security_groups and not enable_dpdk -%}
|
|
enable_security_group = True
|
|
firewall_driver = {{ firewall_driver }}
|
|
{% else -%}
|
|
enable_security_group = False
|
|
{% endif -%}
|