openstack
/
neutron
Code Issues Proposed changes

Add doc note on nf_conntrack module requirement 

The OVS firewall driver requires nf_conntrack module(s)
to be loaded to function properly. While they are typically
loaded automatically, add a note to the admin guide about
the requirement to make it explicit.

Closes-bug: #1834213

Change-Id: I55871eff1e37d4155b8d2b5ae8c182d160c4af9f
This commit is contained in:
Brian Haley 2023-01-24 15:16:47 -05:00
parent 21927e7907
commit c609084b59
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/admin/config-ovsfwdriver.rst
View File

@ -35,6 +35,13 @@ Open vSwitch. All cases require Open vSwitch version 2.5 or newer.
* Kernel version 3.3, but less than 4.3, does not include *conntrack*
support and requires building the OVS modules.
It also requires the conntrack kernel module(s) to be loaded, which
varies depending on the kernel version.
* Kernel version 4.19 or newer requires the *nf_conntrack* module.
* Kernel versions 4.18 or older require the *nf_conntrack_ipv4* and
*nf_conntrack_ipv6* modules.
Enable the native OVS firewall driver
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~