Improve comment re nova live_migration_tunnelled setting

Change-Id: Ie565cb16bb69f0eb98bcfabfb95f67c71f492bd1
This commit is contained in:
Oliver Walsh 2017-12-18 10:24:40 +00:00
parent 0ffd379393
commit 4e6eeb1625

@ -186,8 +186,9 @@ outputs:
nova::compute::instance_usage_audit: true
nova::compute::instance_usage_audit_period: 'hour'
nova::compute::rbd::ephemeral_storage: {get_param: NovaEnableRbdBackend}
# TUNNELLED mode provides a security enhancement when using shared
# storage but is not supported when not using shared storage.
# TUNNELLED mode provides a security improvement for migration, but
# can't be used in combination with block migration. So we only enable it
# when shared storage is available (Ceph RDB is currently the only option).
# See https://bugzilla.redhat.com/show_bug.cgi?id=1301986#c12
# In future versions of QEMU (2.6, mostly), danpb's native
# encryption work will obsolete the need to use TUNNELLED transport