vmware-nsx/vmware_nsx/plugins/nsx_v3
Gary Kotton a96d83ece6 NSX|V3: prevent duplicate default FW sections
When the plugin starts it will check if the global NS group and
OS DFW section are created on the NSX. If not it will create these.
There is a edge case where two servers are started in parallel and
they both create the default section. This will lead to traffic
being dropped.

This is dealt with in the following way:
1. We store the default OS section and NS group in the database
2. If the entries do not exist then we create them, the DB will
   indicate if there is a duplicate and then the plugin will do a
   cleanup of the incorrect resources.

In order to do this we need asecurity group. A default global one
with ID 00000000-def0-0000-0fed-000000000000 is created.

If the admin wishes to delete the global section then she/he should:
1. delete the NSX section
2. delete the security group
3. restart the neutron service

Change-Id: Ide7a7c75efac3e49d51e522a11c77e754f3d1447
2018-03-06 00:39:29 -08:00
..
api_replay NSX-v3: Initial framework for api-replay-mode 2016-06-01 09:41:44 -07:00
__init__.py Divide vmware_nsx/plugins into plugin-specific subdirectories 2015-09-16 16:14:47 -07:00
availability_zones.py TVD availability zones 2018-01-15 12:59:45 +02:00
cert_utils.py NSX|V3 indentation & typo fixing in client certificate 2017-09-27 09:28:23 +03:00
plugin.py NSX|V3: prevent duplicate default FW sections 2018-03-06 00:39:29 -08:00
utils.py NSX|V3 indentation & typo fixing in client certificate 2017-09-27 09:28:23 +03:00