openstack
/
neutron
Code Issues Proposed changes

Add doc note on nf_conntrack module requirement 

The OVS firewall driver requires nf_conntrack module(s)
to be loaded to function properly. While they are typically
loaded automatically, add a note to the admin guide about
the requirement to make it explicit.

Closes-bug: #1834213

Change-Id: I55871eff1e37d4155b8d2b5ae8c182d160c4af9f
This commit is contained in:
Brian Haley 2023-01-24 15:16:47 -05:00
parent 21927e7907
commit c609084b59
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/admin/config-ovsfwdriver.rst
View File

@ -35,6 +35,13 @@ Open vSwitch. All cases require Open vSwitch version 2.5 or newer.
* Kernel version 3.3, but less than 4.3, does not include *conntrack* * Kernel version 3.3, but less than 4.3, does not include *conntrack*
support and requires building the OVS modules. support and requires building the OVS modules.
It also requires the conntrack kernel module(s) to be loaded, which
varies depending on the kernel version.
* Kernel version 4.19 or newer requires the *nf_conntrack* module.
* Kernel versions 4.18 or older require the *nf_conntrack_ipv4* and
*nf_conntrack_ipv6* modules.
Enable the native OVS firewall driver Enable the native OVS firewall driver
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~