Currently updates to security group rules or membership
are handled by immediately triggering a call to refresh_firewall.
This call is quite expensive, and it is often executed with a
very high frequency.
With this patch, the notification handler simply adds devices for
which the firewall should be refreshed to a set, which will then
be processed in another routine. The latter is supposed to
be called in the main agent loop.
This patch for 'provider updates' simply sets a flag for refreshing
the firewall for all devices.
In order to avoid breaking other agents leveraging the security
group RPC mixin, the reactive behaviour is still available, and is
still the default way of handling security group updates.
Patching into Havana as this fixes the issue of the agents flapping
Reviewed: https:/ /review. openstack. org/86062 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=ac971fdf6ae fdb5bdb1854c211 2ed17df5f9e871
Committed: https:/
Submitter: Jenkins
Branch: stable/havana
commit ac971fdf6aefdb5 bdb1854c2112ed1 7df5f9e871
Author: Robert Pothier <email address hidden>
Date: Tue Apr 8 11:25:11 2014 -0400
Improve handling of security group updates
Currently updates to security group rules or membership
are handled by immediately triggering a call to refresh_firewall.
This call is quite expensive, and it is often executed with a
very high frequency.
With this patch, the notification handler simply adds devices for
which the firewall should be refreshed to a set, which will then
be processed in another routine. The latter is supposed to
be called in the main agent loop.
This patch for 'provider updates' simply sets a flag for refreshing
the firewall for all devices.
In order to avoid breaking other agents leveraging the security
group RPC mixin, the reactive behaviour is still available, and is
still the default way of handling security group updates.
Patching into Havana as this fixes the issue of the agents flapping
Partial-Bug: #1253993 tempest- parallel
Partially implements blueprint: neutron-
Cherry-picked from 5e6e592132aa9a9 8936ce3bfdb66ef c7832caafb
3046c4ae22b10 f9e4fa83a47bfe0 89554d4a4681
26d8231b0bf40 50453bcb6122484 c801eff852ca
Change-Id: Idc682f19ebfef4 c00b6bb510ebd7d 77775f4bbca