65a81623fc
With a large number of instances and/or security group rules, conntrack updates when ports are removed or rules are changed can take a long time to process. By enqueuing these to a set or worker threads, the agent can continue with other work while they are processed in the background. This is a change in behavior in the agent since it could program a new set of security group rules before all existing conntrack entries are deleted, but since the iptables or OVSfw NAT rules will have been removed, it should not pose a security issue. Change-Id: Ibf858c7fdf7a822a30e4a0c4722d70fd272741b6 Closes-bug: #1745468 |
||
---|---|---|
.. | ||
common | ||
dhcp | ||
l2 | ||
l3 | ||
linux | ||
metadata | ||
ovsdb | ||
windows | ||
__init__.py | ||
agent_extension.py | ||
agent_extensions_manager.py | ||
dhcp_agent.py | ||
firewall.py | ||
l3_agent.py | ||
metadata_agent.py | ||
resource_cache.py | ||
rpc.py | ||
securitygroups_rpc.py |