openstack
/
openstack-manuals
Code Issues Proposed changes

Add section describing heterogeneous firewall drivers 

There is now support for mixed firewall drivers configured on
L2 agents. This patch adds some documentation to help highlight
and explain that capability.

Change-Id: I99024f9ef392c3e14a416646113d5b47f982563f
Partial-Bug: 1660687
This commit is contained in:
Thomas Maddox 2017-04-21 11:14:07 -05:00
parent 867ac5d9a3
commit ff028f638c
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/networking-guide/source/config-ovsfwdriver.rst
View File

@ -19,6 +19,15 @@ agent includes an optional firewall driver that natively implements security
groups as flows in OVS rather than Linux bridge and *iptables*, thus
increasing scalability and performance.
Configuring heterogeneous firewall drivers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
L2 agents can be configured to use differing firewall drivers. There is no
requirement that they all be the same. If an agent lacks a firewall driver
configuration, it will default to what is configured on its server. This also
means there is no requirement that the server has any firewall driver
configured at all, as long as the agents are configured correctly.
Prerequisites
~~~~~~~~~~~~~