Re: [openstack-dev] [ovs] [neutron] openvswitch flows firewall driver

2018-06-11 Thread Slawomir Kaplonski
Hi, I’m not sure about Queens but recently with [1] we switched default security group driver in devstack to „openvswitch”. Since at least month we have scenario gate job with this SG driver running as voting and gating. Currently, after switch devstack default driver to openvswitch it’s tested

[openstack-dev] [ovs] [neutron] openvswitch flows firewall driver

2018-06-10 Thread Tobias Urdin
Hello everybody, I'm cross-posting this with operators list. The openvswitch flows-based stateful firewall driver which uses the conntrack support in Linux kernel >= 4.3 (iirc) has been marked as experimental for several releases now, is there any information about flaws in this and why it should