openstack/openstack-manuals
Code Issues Proposed changes

Merge "[config-ref] add prevent_arp_spoofing as deprecated"

Browse Source
This commit is contained in:
Jenkins 2016-07-01 09:13:14 +00:00 committed by Gerrit Code Review
commit f67491ed33
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/config-reference/source/tables/neutron-linuxbridge_agent.rst
View File

@ -18,6 +18,8 @@
- Description
* - **[AGENT]**
-
* - ``prevent_arp_spoofing`` = ``True``
- (Boolean) DEPRECATED: Enable suppression of ARP responses that don't match an IP address that belongs to the port from which they originate. Note: This prevents the VMs attached to this agent from spoofing, it doesn't protect them from other devices which have the capability to spoof (e.g. bare metal or VMs attached to agents without this flag set to True). Spoofing rules will not be added to any ports that have port security disabled. For LinuxBridge, this requires ebtables. For OVS, it requires a version that supports matching ARP headers. This option will be removed in Newton so the only way to disable protection will be via the port security extension.
* - ``quitting_rpc_timeout`` = ``10``
- (Integer) Set new timeout in seconds for new rpc calls after agent receives SIGTERM. If value is set to 0, rpc timeout won't be changed
* - **[LINUX_BRIDGE]**

2
tools/autogenerate-config-flagmappings/neutron.flagmappings
View File

@ -188,7 +188,7 @@ AGENT/log_agent_heartbeats common
AGENT/minimize_polling openvswitch_agent
AGENT/ovsdb_monitor_respawn_interval openvswitch_agent
AGENT/polling_interval common
AGENT/prevent_arp_spoofing openvswitch_agent
AGENT/prevent_arp_spoofing openvswitch_agent linuxbridge_agent
AGENT/quitting_rpc_timeout openvswitch_agent linuxbridge_agent ml2_macvtap
AGENT/report_interval metering_agent
AGENT/root_helper common