From: YAMAMOTO Takashi <yamamoto@valinux.co.jp>
Date: Mon, 11 Aug 2014 07:48:27 +0000 (+0900)
Subject: ofagent: Upgrade note about firewall_driver
X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=4aaa3defa056c0479c04ee5cc804301eaf3320e4;p=openstack-build%2Fneutron-build.git

ofagent: Upgrade note about firewall_driver

The corresponding devstack change: https://review.openstack.org/#/c/108915/

Related: blueprint ofagent-port-monitor
Change-Id: Ic917692d50461b1d5c4a07c988839e9f886b91d5
---

diff --git a/neutron/plugins/ofagent/README b/neutron/plugins/ofagent/README
index 8a183c4f6..5341563a6 100644
--- a/neutron/plugins/ofagent/README
+++ b/neutron/plugins/ofagent/README
@@ -37,6 +37,16 @@ We recommend to use a provider network instead as the following:
     [OVS]
     bridge_mappings=$PUBLIC_PHYSICAL_NETWORK:$PUBLIC_BRIDGE
 
+The port naming scheme for ofagent has been changed after Icehouce.
+If you are using security groups, you should switch firewall_driver
+accordingly.
+  From:
+    [securitygroup]
+    firewall_driver=neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
+  To:
+    [securitygroup]
+    firewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
+
 # -- Ryu General
 
 For general Ryu stuff, please refer to