8.7.2. agent

availability_zone = nova

string value

Availability zone of this node

check_child_processes_action = respawn

string value

Action to be executed when a child process dies

check_child_processes_interval = 60

integer value

Interval between checks of child process liveness (seconds), use 0 to disable

comment_iptables_rules = True

boolean value

Add comments to iptables rules. Set to false to disallow the addition of comments to generated iptables rules that describe each rule’s purpose. System must support the iptables comments module for addition of comments.

debug_iptables_rules = False

boolean value

Duplicate every iptables difference calculation to ensure the format being generated matches the format of iptables-save. This option should not be turned on for production systems because it imposes a performance penalty.

kill_scripts_path = /etc/neutron/kill_scripts/

string value

Location of scripts used to kill external processes. Names of scripts here must follow the pattern: "<process-name>-kill" where <process-name> is name of the process which should be killed using this script. For example, kill script for dnsmasq process should be named "dnsmasq-kill". If path is set to None, then default "kill" command will be used to stop processes.

log_agent_heartbeats = False

boolean value

Log agent heartbeats

report_interval = 30

floating point value

Seconds between nodes reporting state to server; should be less than agent_down_time, best if it is half or less than agent_down_time.

root_helper = sudo

string value

Root helper application. Use sudo neutron-rootwrap /etc/neutron/rootwrap.conf to use the real root filter facility. Change to sudo to skip the filtering and just run the command directly.

root_helper_daemon = None

string value

Root helper daemon application to use when possible.

Use sudo neutron-rootwrap-daemon /etc/neutron/rootwrap.conf to run rootwrap in "daemon mode" which has been reported to improve performance at scale. For more information on running rootwrap in "daemon mode", see:

https://docs.openstack.org/oslo.rootwrap/latest/user/usage.html#daemon-mode

For the agent which needs to execute commands in Dom0 in the hypervisor of XenServer, this option should be set to xenapi_root_helper, so that it will keep a XenAPI session to pass commands to Dom0.

use_helper_for_ns_read = True

boolean value

Use the root helper when listing the namespaces on a system. This may not be required depending on the security configuration. If the root helper is not required, set this to False for a performance improvement.