ofagent: Upgrade note about firewall_driver

The corresponding devstack change: https://review.openstack.org/#/c/108915/

Related: blueprint ofagent-port-monitor
Change-Id: Ic917692d50461b1d5c4a07c988839e9f886b91d5

diff --git a/neutron/plugins/ofagent/README b/neutron/plugins/ofagent/README
index 8a183c4f621f115471aa9815d8c0fb7912562cd9..5341563a64a6ff2ce3c952ada5006486273ea8dc 100644 (file)
--- a/neutron/plugins/ofagent/README
+++ b/neutron/plugins/ofagent/README
@@ -37,6 +37,16 @@ We recommend to use a provider network instead as the following:
     [OVS]
     bridge_mappings=$PUBLIC_PHYSICAL_NETWORK:$PUBLIC_BRIDGE
 
+The port naming scheme for ofagent has been changed after Icehouce.
+If you are using security groups, you should switch firewall_driver
+accordingly.
+  From:
+    [securitygroup]
+    firewall_driver=neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
+  To:
+    [securitygroup]
+    firewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
+
 # -- Ryu General
 
 For general Ryu stuff, please refer to