bridge_mac_table_size
has been added for
Neutron OVS agent.
This value will be set on every Open vSwitch bridge managed by the
openvswitch-neutron-agent in other_config:mac-table-size
column
in ovsdb.
Default value for this new option is set to 50000 and it should be enough
for most systems.
More details about this option can be found in Open vSwitch documentation
For more information see bug
1775797.metering_agent.ini
file. For example,
interface_driver = openvswitch
instead of
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
ovsdb_timeout
config option to some value higher than 600 seconds.ovsdb_timeout
config option in
neutron-ovs-cleanup
script.
The default value is 10 seconds, but that is not enough for the
neutron-ovs-cleanup
script when there are many ports to remove from
a single bridge, for example, 5000. Because of that, we now override the
default value for the config option to be 600 seconds (10 minutes).In order to reduce the time spent processing security group updates in the L2 agent, conntrack deletion is now performed in a set of worker threads instead of the main agent thread, so it can return to processing other events quickly.
DNS server assignment can now be disabled in replies sent from the DHCP agent.
A new agent_mode(dvr_no_external
) for DVR routers has been added to allow the server to configure Floating IPs associated with DVR at the centralized node.
dns_domain
attribute. A port’s dns_domain
attribute has precedence over the network’s dns_domain
from the point of view of publishing it to the external DNS service.dscp
for both OVS and linuxbridge agents.dscp_inherit
for both openvswitch and linuxbridge. If this option is set to true, then the value of dscp
will be ignored.neutron-dhcp-agent
. By allowing these timers to be set (options 58
and 59 as per RFC2132) in dnsmasq
it allows users to change
other parameters, like MTU, on instances without having to wait for
the lease time to expire. The advantage of changing T1 over the
lease time is that if the DHCP server becomes unreachable within
the lease time, instances will not drop their IP addresses and it
will not cause a dataplane disruption.dns_nameservers
attribute for
the corresponding subnet to 0.0.0.0
or ::
, for IPv4 or IPv6 subnets
(respectively).ML2
_common_agent
have now the L2 extension API
available. This API can be used by L2 extension drivers to request
resources from the L2 agent.
It is used, for example, to pass an instance of the IptablesManager
to the Linuxbridge
L2 agent QoS extension driver
.dvr_no_external
has been introduced with this
release. This agent type allows the Floating IPs (DNAT/North-South routing)
to be centralized while the East/West routing is still distributed.qos_policy_id
was added to floating IP related API.ssl
prefixed URI for the
ovsdb_connection
setting. When using SSL it is also required to set
new ovs
group options which include ssl_key_file
, ssl_cert_file
, and
ssl_ca_cert_file
.get_router_info
has been added to L3AgentExtensionAPI
.ha_state_change
has been added to
L3AgentExtensionsManager
.dvr
agents and dvr_no_external
agents.
But please avoid any VM with Floating IP migration between a dvr
agent
and a dvr_no_external
agent. All VM ports with Floating IPs should be
migrated to same agent_mode.
This would be one of the restrictions.0.0.0.0
or
::
has been changed with this release. The old behaviour was that each
DHCP agent would supply only its own IP address as the DNS server to its
clients. The new behaviour is that the DHCP agent will not supply any DNS
server IP address at all.dvr_no_external
was added. Changing between
this mode and dvr
is a disruptive operation to the dataplane.tos
configuration option in vxlan group for linuxbridge is deprecated and replaced with the more precise option dscp
. The TOS value is made of DSCP and ECN bits. It is not possible to set the ECN value through the TOS value, and ECN is always inherited from the inner in case of tunneling.ivs
interface driver is deprecated in Queens and will be removed in
Rocky.ovsdb_interface
configuration option is now deprecated. In future
releases, the value of the option will be ignored. The native
driver
will then be used.neutron.api.versions:Versions.factory
has been
deprecated and will be removed in the Rocky release. Please update your
api-paste.ini file to use the one that ships with Queens or update any
references to the Versions factory to point to
neutron.pecan_wsgi.app:versions_factory
instead.ovs_vsctl_timeout
option is renamed into ovsdb_timeout
to
reflect that it’s not specific to vsctl
implementation of
ovsdb_interface
. It is also moved under [OVS]
section.Linuxbridge L2 agent
with QoS extension driver
enabled.fdb
that uses
the Linux bridge
command.
The bridge
command has been added to the
rootwrap openvswitch-plugin.filters file.
For more information, see bug:
1730407Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.