1 [ovs] |
|
2 # Do not change this parameter unless you have a good reason to. |
|
3 # This is the name of the OVS integration bridge. There is one per hypervisor. |
|
4 # The integration bridge acts as a virtual "patch bay". All VM VIFs are |
|
5 # attached to this bridge and then "patched" according to their network |
|
6 # connectivity. |
|
7 # |
|
8 integration_bridge = br_int0 |
|
9 |
|
10 # Only used for the agent if tunnel_id_ranges is not empty for |
|
11 # the server. In most cases, the default value should be fine. |
|
12 # |
|
13 # In the case of Solaris, the integration bridge and tunnel bridge must |
|
14 # be the same. |
|
15 # |
|
16 tunnel_bridge = br_int0 |
|
17 |
|
18 # Peer patch port in integration bridge for tunnel bridge |
|
19 # int_peer_patch_port = patch-tun |
|
20 |
|
21 # Peer patch port in tunnel bridge for integration bridge |
|
22 # tun_peer_patch_port = patch-int |
|
23 |
|
24 # Uncomment this line for the agent if tunnel_id_ranges is not |
|
25 # empty for the server. Set local-ip to be the local IP address of |
|
26 # this hypervisor. |
|
27 # |
|
28 # local_ip = |
|
29 |
|
30 # (ListOpt) Comma-separated list of <physical_network>:<bridge> tuples |
|
31 # mapping physical network names to the agent's node-specific OVS |
|
32 # bridge names to be used for flat and VLAN networks. The length of |
|
33 # bridge names should be no more than 11. Each bridge must |
|
34 # exist, and should have a physical network interface configured as a |
|
35 # port. All physical networks configured on the server should have |
|
36 # mappings to appropriate bridges on each agent. |
|
37 # |
|
38 # bridge_mappings = |
|
39 # Example: bridge_mappings = physnet1:br-eth1 |
|
40 |
|
41 # (BoolOpt) Use veths instead of patch ports to interconnect the integration |
|
42 # bridge to physical networks. Support kernel without ovs patch port support |
|
43 # so long as it is set to True. |
|
44 # use_veth_interconnection = False |
|
45 |
|
46 # (StrOpt) Which OVSDB backend to use, defaults to 'vsctl' |
|
47 # vsctl - The backend based on executing ovs-vsctl |
|
48 # native - The backend based on using native OVSDB |
|
49 # ovsdb_interface = vsctl |
|
50 |
|
51 # (StrOpt) The connection string for the native OVSDB backend |
|
52 # To enable ovsdb-server to listen on port 6640: |
|
53 # ovs-vsctl set-manager ptcp:6640:127.0.0.1 |
|
54 # ovsdb_connection = tcp:127.0.0.1:6640 |
|
55 |
|
56 [agent] |
|
57 # Agent's polling interval in seconds |
|
58 # polling_interval = 2 |
|
59 |
|
60 # Minimize polling by monitoring ovsdb for interface changes |
|
61 # minimize_polling = True |
|
62 |
|
63 # When minimize_polling = True, the number of seconds to wait before |
|
64 # respawning the ovsdb monitor after losing communication with it |
|
65 # ovsdb_monitor_respawn_interval = 30 |
|
66 |
|
67 # (ListOpt) The types of tenant network tunnels supported by the agent. |
|
68 # Setting this will enable tunneling support in the agent. This can be set to |
|
69 # either 'gre' or 'vxlan'. If this is unset, it will default to [] and |
|
70 # disable tunneling support in the agent. |
|
71 # You can specify as many values here as your compute hosts supports. |
|
72 # |
|
73 # tunnel_types = |
|
74 # Example: tunnel_types = gre |
|
75 # Example: tunnel_types = vxlan |
|
76 # Example: tunnel_types = vxlan, gre |
|
77 |
|
78 # (IntOpt) The port number to utilize if tunnel_types includes 'vxlan'. By |
|
79 # default, this will make use of the Open vSwitch default value of '4789' if |
|
80 # not specified. |
|
81 # |
|
82 # vxlan_udp_port = |
|
83 # Example: vxlan_udp_port = 8472 |
|
84 |
|
85 # (IntOpt) This is the MTU size of veth interfaces. |
|
86 # Do not change unless you have a good reason to. |
|
87 # The default MTU size of veth interfaces is 1500. |
|
88 # This option has no effect if use_veth_interconnection is False |
|
89 # veth_mtu = |
|
90 # Example: veth_mtu = 1504 |
|
91 |
|
92 # (BoolOpt) Flag to enable l2-population extension. This option should only be |
|
93 # used in conjunction with ml2 plugin and l2population mechanism driver. It'll |
|
94 # enable plugin to populate remote ports macs and IPs (using fdb_add/remove |
|
95 # RPC calbbacks instead of tunnel_sync/update) on OVS agents in order to |
|
96 # optimize tunnel management. |
|
97 # |
|
98 # l2_population = False |
|
99 |
|
100 # Enable local ARP responder. Requires OVS 2.1. This is only used by the l2 |
|
101 # population ML2 MechanismDriver. |
|
102 # |
|
103 # arp_responder = False |
|
104 |
|
105 # Enable suppression of ARP responses that don't match an IP address that |
|
106 # belongs to the port from which they originate. |
|
107 # Note: This prevents the VMs attached to this agent from spoofing, |
|
108 # it doesn't protect them from other devices which have the capability to spoof |
|
109 # (e.g. bare metal or VMs attached to agents without this flag set to True). |
|
110 # Requires a version of OVS that can match ARP headers. |
|
111 # |
|
112 # prevent_arp_spoofing = False |
|
113 |
|
114 # (BoolOpt) Set or un-set the don't fragment (DF) bit on outgoing IP packet |
|
115 # carrying GRE/VXLAN tunnel. The default value is True. |
|
116 # |
|
117 # dont_fragment = True |
|
118 |
|
119 # (BoolOpt) Set to True on L2 agents to enable support |
|
120 # for distributed virtual routing. |
|
121 # |
|
122 # enable_distributed_routing = False |
|
123 |
|
124 # (IntOpt) Set new timeout in seconds for new rpc calls after agent receives |
|
125 # SIGTERM. If value is set to 0, rpc timeout won't be changed" |
|
126 # |
|
127 # quitting_rpc_timeout = 10 |
|
128 |
|
129 [securitygroup] |
|
130 # Firewall driver for realizing neutron security group function. |
|
131 # firewall_driver = neutron.agent.firewall.NoopFirewallDriver |
|
132 # Example: firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver |
|
133 |
|
134 # Controls if neutron security group is enabled or not. |
|
135 # It should be false when you use nova security group. |
|
136 enable_security_group = False |
|
137 |
|
138 #----------------------------------------------------------------------------- |
|
139 # Sample Configurations. |
|
140 #----------------------------------------------------------------------------- |
|
141 # |
|
142 # 1. With VLANs on eth1. |
|
143 # [ovs] |
|
144 # integration_bridge = br-int |
|
145 # bridge_mappings = default:br-eth1 |
|
146 # |
|
147 # 2. With GRE tunneling. |
|
148 # [ovs] |
|
149 # integration_bridge = br-int |
|
150 # tunnel_bridge = br-tun |
|
151 # local_ip = 10.0.0.3 |
|
152 # |
|
153 # 3. With VXLAN tunneling. |
|
154 # [ovs] |
|
155 # integration_bridge = br-int |
|
156 # tunnel_bridge = br-tun |
|
157 # local_ip = 10.0.0.3 |
|
158 # [agent] |
|
159 # tunnel_types = vxlan |
|