openstack
/
neutron
Code Issues Proposed changes

Update doc for upgrading to openvswitch firewall 

Change-Id: I5a8451370646d8d149c03283a2180e325a2d7b1c
Closes-bug: #1914522
This commit is contained in:
shenjiatong 2021-02-18 10:58:06 +08:00
parent edf786c671
commit 9641b6dfeb
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/source/contributor/internals/openvswitch_firewall.rst
View File

@ -557,6 +557,12 @@ use the OVS firewall, and instances from other nodes can be live-migrated to
it. Once the first node is evacuated, its firewall driver can be then be
switched to the OVS driver.
.. note::
During upgrading to openvswitch firewall, the security rules
are still working for previous iptables controlled hybrid ports. But it will
not work if one tries to replace openvswitch firewall with iptables.
.. |table_0| replace:: ``table 0`` (LOCAL_SWITCHING)
.. |table_60| replace:: ``table 60`` (TRANSIENT)
.. |table_71| replace:: ``table 71`` (BASE_EGRESS)