8.8.5. securitygroup
The following table outlines the options available under the [securitygroup]
group in the /etc/neutron/plugins/ml2/openvswitch_agent.ini
file.
Configuration option = Default value | Type | Description |
---|---|---|
| boolean value | Use ipset to speed-up the iptables based security groups. Enabling ipset support requires that ipset is installed on L2 agent node. |
| boolean value | Controls whether the neutron security group API is enabled in the server. It should be false when using no security groups or using the nova security group API. |
| string value | Driver for security groups firewall in the L2 agent |
| list value | Comma-separated list of ethertypes to be permitted, in hexadecimal (starting with "0x"). For example, "0x4008" to permit InfiniBand. |