OpenStack Compute (nova)

  1. Bug #1112912
  2. Comment #5

Comment 5 for bug 1112912

Revision history for this message
Akihiro Motoki (amotoki) wrote : Re: get_firewall_required should use VIF parameter from quantum

Three parameters have the following meaning.
- vif_require_securitygroup : If True, Quantum does not provide security group feature and Nova requires to provide security group feature.
- vif_prevent_spoofing : If True, Nova requires to setup IP/MAC spoofing filters (Quantum does not provide it). get_firewall_required() in libvirt/vif.py is expected to return True.
- vif_require_iptables : If True, Nova needs to make sure iptables works. If a bridge is OVS, hybrid vif plugging needs to be setup. There is no relation between this value and whether Quantum or Nova provides security group.