Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty - 

 VMware NSX configuration options

Table 10.46. Description of VMware NSX configuration options
Configuration option = Default value Description
[DEFAULT]
conn_idle_timeout = 900 (IntOpt) Reconnect connection to nsx if not used within this amount of time.
default_service_cluster_uuid = None (StrOpt) Unique identifier of the Service Cluster which will be used by logical services like dhcp and metadata
default_tz_uuid = None (StrOpt) This is uuid of the default NSX Transport zone that will be used for creating tunneled isolated "Neutron" networks. It needs to be created in NSX before starting Neutron with the nsx plugin.
http_timeout = 75 (IntOpt) Time before aborting a request
nsx_controllers = None (ListOpt) Lists the NSX controllers in this cluster
nsx_default_interface_name = breth0 (StrOpt) Name of the interface on a L2 Gateway transport nodewhich should be used by default when setting up a network connection
nsx_l2gw_driver = None (StrOpt) Class path for the L2 gateway backend driver
nsx_password = admin (StrOpt) Password for NSX controllers in this cluster
nsx_user = admin (StrOpt) User name for NSX controllers in this cluster
redirects = 2 (IntOpt) Number of times a redirect should be followed
retries = 2 (IntOpt) Number of time a request should be retried
[NSX]
agent_mode = agent (StrOpt) The mode used to implement DHCP/metadata services.
concurrent_connections = 10 (IntOpt) Maximum concurrent connections to each NSX controller.
default_transport_type = stt (StrOpt) The default network tranport type to use (stt, gre, bridge, ipsec_gre, or ipsec_stt)
max_lp_per_bridged_ls = 5000 (IntOpt) Maximum number of ports of a logical switch on a bridged transport zone (default 5000)
max_lp_per_overlay_ls = 256 (IntOpt) Maximum number of ports of a logical switch on an overlay transport zone (default 256)
metadata_mode = access_network (StrOpt) If set to access_network this enables a dedicated connection to the metadata proxy for metadata server access via Neutron router. If set to dhcp_host_route this enables host route injection via the dhcp agent. This option is only useful if running on a host that does not support namespaces otherwise access_network should be used.
nsx_gen_timeout = -1 (IntOpt) Number of seconds a generation id should be valid for (default -1 meaning do not time out)
replication_mode = service (StrOpt) The default option leverages service nodes to perform packet replication though one could set to this to 'source' to perform replication locally. This is useful if one does not want to deploy a service node(s). It must be set to 'service' for leveraging distributed routers.
[NSX_DHCP]
default_lease_time = 43200 (IntOpt) Default DHCP lease time
domain_name = openstacklocal (StrOpt) Domain to use for building the hostnames
extra_domain_name_servers = (ListOpt) Comma separated list of additional domain name servers
[NSX_LSN]
sync_on_missing_data = False (BoolOpt) Pull LSN information from NSX in case it is missing from the local data store. This is useful to rebuild the local store in case of server recovery.
[NSX_METADATA]
metadata_server_address = 127.0.0.1 (StrOpt) IP address used by Metadata server.
metadata_server_port = 8775 (IntOpt) TCP Port used by Metadata server.
metadata_shared_secret = (StrOpt) Shared secret to sign instance-id request
[NSX_SYNC]
always_read_status = False (BoolOpt) Always read operational status from backend on show operations. Enabling this option might slow down the system.
max_random_sync_delay = 0 (IntOpt) Maximum value for the additional random delay in seconds between runs of the state synchronization task
min_chunk_size = 500 (IntOpt) Minimum number of resources to be retrieved from NSX during state synchronization
min_sync_req_delay = 1 (IntOpt) Minimum delay, in seconds, between two state synchronization queries to NSX. It must not exceed state_sync_interval
state_sync_interval = 10 (IntOpt) Interval in seconds between runs of the state synchronization task. Set it to 0 to disable it
[nsx_v3]
ca_file = None (StrOpt) Specify a CA bundle file to use in verifying the NSX Manager server certificate.
default_bridge_cluster_uuid = None (StrOpt) Default bridge cluster identifier for L2 gateway. This needs to be created in NSX before using the L2 gateway service plugin.
default_edge_cluster_uuid = None (StrOpt) Default edge cluster identifier
default_overlay_tz_uuid = None (StrOpt) This is the UUID of the default NSX overlay transport zone that will be used for creating tunneled isolated Neutron networks. It needs to be created in NSX before starting Neutron with the NSX plugin.
default_tier0_router_uuid = None (StrOpt) Default tier0 router identifier
default_vlan_tz_uuid = None (StrOpt) This is the UUID of the default NSX VLAN transport zone that will be used for bridging between Neutron networks. It needs to be created in NSX before starting Neutron with the NSX plugin.
insecure = True (BoolOpt) If true, the NSX Manager server certificate is not verified. If false, then the default CA truststore is used for verification. This option is ignored if "ca_file" is set.
nsx_manager = None (StrOpt) IP address of the NSX manager
nsx_password = default (StrOpt) Password for the NSX manager
nsx_user = admin (StrOpt) User name for the NSX manager
retries = 10 (IntOpt) Maximum number of times to retry API request
[nsxv]
backup_edge_pool = service:large:4:10, service:compact:4:10, vdr:large:4:10 (ListOpt) Defines edge pool using the format: <edge_type>:[edge_size]:<min_edges>:<max_edges>.edge_type: service,vdr. edge_size: compact, large, xlarge, quadlarge and default is large.
ca_file = None (StrOpt) Specify a CA bundle file to use in verifying the NSXv server certificate.
cluster_moid = (ListOpt) Parameter listing the IDs of the clusters which are used by OpenStack.
datacenter_moid = None (StrOpt) Optional parameter identifying the ID of datacenter to deploy NSX Edges
datastore_id = None (StrOpt) Optional parameter identifying the ID of datastore to deploy NSX Edges
deployment_container_id = None (StrOpt) Optional parameter identifying the ID of datastore to deploy NSX Edges
dhcp_lease_time = 86400 (IntOpt) DHCP default lease time.
dvs_id = None (StrOpt) DVS ID for VLANs
edge_appliance_password = None (StrOpt) Password to configure for Edge appliance login
edge_appliance_user = None (StrOpt) Username to configure for Edge appliance login
edge_ha = False (BoolOpt) Enable HA for NSX Edges
exclusive_router_appliance_size = compact (StrOpt) Edge appliance size to be used for creating exclusive router. Valid values: ['compact', 'large', 'xlarge', 'quadlarge']. This edge_appliance_size will be picked up if --router-size parameter is not specified while doing neutron router-create
external_network = None (StrOpt) Network ID for physical network connectivity
insecure = True (BoolOpt) If true, the NSXv server certificate is not verified. If false, then the default CA truststore is used for verification. This option is ignored if "ca_file" is set.
locking_coordinator_url = None (StrOpt) A URL to a locking mechanism coordinator
manager_uri = None (StrOpt) uri for vsm
maximum_tunnels_per_vnic = 20 (IntOpt) Maximum number of sub interfaces supported per vnic in edge.
metadata_initializer = True (BoolOpt) If True, the server instance will attempt to initialize the metadata infrastructure
metadata_shared_secret = None (StrOpt) Shared secret to sign metadata requests
mgt_net_default_gateway = None (StrOpt) Management network default gateway for metadata proxy
mgt_net_moid = None (StrOpt) Network ID for management network connectivity
mgt_net_proxy_ips = None (ListOpt) Management network IP address for metadata proxy
mgt_net_proxy_netmask = None (StrOpt) Management network netmask for metadata proxy
nova_metadata_ips = None (ListOpt) IP addresses used by Nova metadata service
nova_metadata_port = 8775 (IntOpt) TCP Port used by Nova metadata server
password = default (StrOpt) Password for vsm
resource_pool_id = None (StrOpt) Optional parameter identifying the ID of resource to deploy NSX Edges
retries = 10 (IntOpt) Maximum number of API retries on endpoint.
spoofguard_enabled = True (BoolOpt) If True then plugin will use NSXV spoofguard component for port-security feature.
task_status_check_interval = 2000 (IntOpt) Task status check interval
tenant_router_types = shared, distributed, exclusive (ListOpt) Ordered list of router_types to allocate as tenant routers.
user = admin (StrOpt) User name for vsm
vdn_scope_id = None (StrOpt) Network scope ID for VXLAN virtual wires

Questions? Discuss on ask.openstack.org
Found an error? Report a bug against this page

loading table of contents...