Ask Your Question
0

Should the linuxbridge agent running when using ovs agent?

asked 2016-07-03 22:24:08 -0600

kramer gravatar image

According to official docs (http://docs.openstack.org/mitaka/networking-guide/scenario-classic-ovs.html (http://docs.openstack.org/mitaka/netw...)), when using ovs-agent there should also be linuxbridge used for security groups.

Linux bridges handling security groups. Due to limitations with Open vSwitch and iptables, the Networking service uses a Linux bridge to manage security groups for instances.

In my enviroment, I use ovs-agent + ml2 to setup vlan tenant networks and flat provider networks. But when I create vm on tenant network there is no linuxbridge on my compute node. I do not know if it is normal. Should I startup the linuxbridge agent service?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2016-07-04 20:39:16 -0600

billy gravatar image

did you create tenant network for your instance ? if your are using neutron networking then neutron will take care your security group by adding blow config in ml2 lyer

firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-07-03 22:24:08 -0600

Seen: 134 times

Last updated: Jul 04 '16