Current Series Release Notes

8.0.0-7

New Features

  • Now the etcd api version is detected automatically. The API version can be overridden by the api_version query parameter of the coordination backend url, or the ETCD3GW_API_PATH environment.

  • It is now possible to add security group support to existing drivers. This is implemented as a neutron service plugin and can be enabled by appending genericswitch_security_group to the neutron configuration [DEFAULT]service_plugins list. The security group feature is limited to applying one security group to a port.

    The first driver to have security group support added is netmiko_cisco_nxos. Limitations specific to this driver are:

    • Only ingress rules allowed

    • Only IPv4 rules are implemented

    • Supports rules for protocols: tcp, udp, icmp

  • The netmiko_dell_os10 driver now supports security groups on switches running Dell OS10, supporting the following:

    • Ingress and egress rules

    • IPv4

    • Rule filters for IP protocols TCP, UDP and ICMP

  • The netmiko_sonic driver now supports security groups on upstream distributions of SONiC, supporting the following:

    • Ingress and egress rules

    • IPv4 and IPv6

    • Rule filters for IP protocols TCP, UDP and ICMP

    The security group (ACL) implementation of Dell Enterprise SONiC 4.5 diverges from upstream enough to require the addition of a new driver netmiko_dell_enterprise_sonic. This driver should be specified when running this distribution of SONiC on Dell hardware.

    Dell Enterprise SONiC 4.5 also lacks support for ICMP filter rules, and this is enforced by netmiko_dell_enterprise_sonic.

8.0.0

Other Notes

  • Explicit usage and monkey-patching with eventlet have been removed. Since this is a Neutron plugin, Neutron may still load eventlet modules, but netowrking-generic-switch no longer explicitly uses it. Operators should be sensitive to potential performance changes, although none are expected.