8.8.5. securitygroup
The following table outlines the options available under the [securitygroup] group in the /etc/neutron/plugins/ml2/openvswitch_agent.ini file.
| Configuration option = Default value | Type | Description |
|---|---|---|
|
| boolean value | Use ipset to speed-up the iptables based security groups. Enabling ipset support requires that ipset is installed on L2 agent node. |
|
| boolean value | Controls whether the neutron security group API is enabled in the server. It should be false when using no security groups or using the nova security group API. |
|
| string value | Driver for security groups firewall in the L2 agent |
|
| list value | Comma-separated list of ethertypes to be permitted, in hexadecimal (starting with "0x"). For example, "0x4008" to permit InfiniBand. |
