Kevin Benton
19dbbe6f00
The iptables apply logic performs diffs between the rules in the system and the desired rule state. If the format generated in Neutron does not match the format of iptables-save, Neutron will generate unnecessary deletions and adds for rules that it thinks are different when they are actually the same. A simple way to detect mismatches is to run the _apply function twice each time and generate an error if the second one results in changes since that implies that the rules the first one applied did not match the format of iptables-save. However, this comes at a performance cost and doesn't offer benefits to operators. This patch adds a config option to debug_iptables_rules that is set to False by default. When set to True it will perform the secondary check described above. This enables it for all of the jobs that call the gate_hook.sh script. This is only meant to assist catching development errors of iptables, it SHOULD NOT be turned on by operators. Change-Id: I6bee1d51155488e91857ee8bc45470d6a224fa37
Welcome!
You have come across a cloud computing network fabric controller. It has identified itself as "Neutron." It aims to tame your (cloud) networking!
External Resources:
The homepage for Neutron is: http://launchpad.net/neutron. Use this site for asking for help, and filing bugs. Code is available on git.openstack.org at <http://git.openstack.org/cgit/openstack/neutron>.
The latest and most in-depth documentation on how to use Neutron is available at: <http://docs.openstack.org>. This includes:
- Neutron Administrator Guide
- Networking Guide
- Neutron API Reference:
-
http://docs.openstack.org/api/openstack-network/2.0/content/
- Current Neutron developer documentation is available at:
For help on usage and hacking of Neutron, please send mail to <mailto:openstack-dev@lists.openstack.org>.
For information on how to contribute to Neutron, please see the contents of the CONTRIBUTING.rst file.