From 183c82b59a69a308aff13829a153460207aba8b6 Mon Sep 17 00:00:00 2001 From: Boden R Date: Thu, 7 Sep 2017 14:16:22 -0600 Subject: [PATCH] doc br_netfilter prereq for linux bridge This patch updates our install documentation to account for the fact that linux systems must have net.bridge sysctl knobs. Change-Id: I8b65e2ef22d57cd6c501f25a33af8c1900f20497 Closes-Bug: #1672922 --- doc/source/install/compute-install-option1-obs.rst | 14 ++++++++++++++ doc/source/install/compute-install-option1-rdo.rst | 14 ++++++++++++++ .../install/compute-install-option1-ubuntu.rst | 14 ++++++++++++++ doc/source/install/compute-install-option2-obs.rst | 14 ++++++++++++++ doc/source/install/compute-install-option2-rdo.rst | 14 ++++++++++++++ .../install/compute-install-option2-ubuntu.rst | 14 ++++++++++++++ .../install/controller-install-option1-obs.rst | 14 ++++++++++++++ .../install/controller-install-option1-rdo.rst | 14 ++++++++++++++ .../install/controller-install-option1-ubuntu.rst | 14 ++++++++++++++ .../install/controller-install-option2-obs.rst | 14 ++++++++++++++ .../install/controller-install-option2-rdo.rst | 14 ++++++++++++++ .../install/controller-install-option2-ubuntu.rst | 14 ++++++++++++++ 12 files changed, 168 insertions(+) diff --git a/doc/source/install/compute-install-option1-obs.rst b/doc/source/install/compute-install-option1-obs.rst index b938cf2aedb..dd789c864f6 100644 --- a/doc/source/install/compute-install-option1-obs.rst +++ b/doc/source/install/compute-install-option1-obs.rst @@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration* diff --git a/doc/source/install/compute-install-option1-rdo.rst b/doc/source/install/compute-install-option1-rdo.rst index 1744b224c0f..16277b8d7c4 100644 --- a/doc/source/install/compute-install-option1-rdo.rst +++ b/doc/source/install/compute-install-option1-rdo.rst @@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration* diff --git a/doc/source/install/compute-install-option1-ubuntu.rst b/doc/source/install/compute-install-option1-ubuntu.rst index cd65201ee9c..a4329d56884 100644 --- a/doc/source/install/compute-install-option1-ubuntu.rst +++ b/doc/source/install/compute-install-option1-ubuntu.rst @@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration* diff --git a/doc/source/install/compute-install-option2-obs.rst b/doc/source/install/compute-install-option2-obs.rst index 9a0621887ee..272b1014530 100644 --- a/doc/source/install/compute-install-option2-obs.rst +++ b/doc/source/install/compute-install-option2-obs.rst @@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration*. diff --git a/doc/source/install/compute-install-option2-rdo.rst b/doc/source/install/compute-install-option2-rdo.rst index 3ca09344d66..5147d048ddf 100644 --- a/doc/source/install/compute-install-option2-rdo.rst +++ b/doc/source/install/compute-install-option2-rdo.rst @@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration*. diff --git a/doc/source/install/compute-install-option2-ubuntu.rst b/doc/source/install/compute-install-option2-ubuntu.rst index 6794d0357ce..177082cfe5d 100644 --- a/doc/source/install/compute-install-option2-ubuntu.rst +++ b/doc/source/install/compute-install-option2-ubuntu.rst @@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Return to *Networking compute node configuration*. diff --git a/doc/source/install/controller-install-option1-obs.rst b/doc/source/install/controller-install-option1-obs.rst index a630a11e651..cc40f66ed75 100644 --- a/doc/source/install/controller-install-option1-obs.rst +++ b/doc/source/install/controller-install-option1-obs.rst @@ -263,6 +263,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the DHCP agent ------------------------ diff --git a/doc/source/install/controller-install-option1-rdo.rst b/doc/source/install/controller-install-option1-rdo.rst index 95e52cdd928..dc423ed327c 100644 --- a/doc/source/install/controller-install-option1-rdo.rst +++ b/doc/source/install/controller-install-option1-rdo.rst @@ -273,6 +273,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the DHCP agent ------------------------ diff --git a/doc/source/install/controller-install-option1-ubuntu.rst b/doc/source/install/controller-install-option1-ubuntu.rst index 938b50083b0..5e372295bea 100644 --- a/doc/source/install/controller-install-option1-ubuntu.rst +++ b/doc/source/install/controller-install-option1-ubuntu.rst @@ -262,6 +262,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the DHCP agent ------------------------ diff --git a/doc/source/install/controller-install-option2-obs.rst b/doc/source/install/controller-install-option2-obs.rst index 8bf6745c268..4bde1d9d0c8 100644 --- a/doc/source/install/controller-install-option2-obs.rst +++ b/doc/source/install/controller-install-option2-obs.rst @@ -290,6 +290,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the layer-3 agent --------------------------- diff --git a/doc/source/install/controller-install-option2-rdo.rst b/doc/source/install/controller-install-option2-rdo.rst index 41b65c7893e..3c6c17c75cc 100644 --- a/doc/source/install/controller-install-option2-rdo.rst +++ b/doc/source/install/controller-install-option2-rdo.rst @@ -300,6 +300,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the layer-3 agent --------------------------- diff --git a/doc/source/install/controller-install-option2-ubuntu.rst b/doc/source/install/controller-install-option2-ubuntu.rst index 71d228d5676..c36f6782ce2 100644 --- a/doc/source/install/controller-install-option2-ubuntu.rst +++ b/doc/source/install/controller-install-option2-ubuntu.rst @@ -289,6 +289,20 @@ networking infrastructure for instances and handles security groups. .. end + * Ensure your Linux operating system kernel supports network bridge filters + by verifying all the following ``sysctl`` values are set to ``1``: + + .. code-block:: ini + + net.bridge.bridge-nf-call-iptables + net.bridge.bridge-nf-call-ip6tables + + .. end + + To enable networking bridge support, typically the ``br_netfilter`` kernel + module needs to be loaded. Check your operating system's documentation for + additional details on enabling this module. + Configure the layer-3 agent ---------------------------