yahoo-eng-team team mailing list archive

[OpenStack Infra <1672922@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/501862
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=183c82b59a69a308aff13829a153460207aba8b6
Submitter: Jenkins
Branch:    master

commit 183c82b59a69a308aff13829a153460207aba8b6
Author: Boden R <bodenvmw@xxxxxxxxx>
Date:   Thu Sep 7 14:16:22 2017 -0600

    doc br_netfilter prereq for linux bridge
    
    This patch updates our install documentation to account for the fact
    that linux systems must have net.bridge sysctl knobs.
    
    Change-Id: I8b65e2ef22d57cd6c501f25a33af8c1900f20497
    Closes-Bug: #1672922


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1672922

Title:
      iptables: stop 'fixing' kernel sysctl bridge firewalling knobs

Status in neutron:
  Fix Released

Bug description:
  https://review.openstack.org/436315
  Dear bug triager. This bug was created since a commit was marked with DOCIMPACT.
  Your project "openstack/neutron" is set up so that we directly report the documentation bugs against it. If this needs changing, the docimpact-group option needs to be added for the project. You can ask the OpenStack infra team (#openstack-infra on freenode) for help if you need to.

  commit c1dfb53bf1db1fe65ba6a8ef64a0b30151ee5c03
  Author: Ihar Hrachyshka <ihrachys@xxxxxxxxxx>
  Date:   Sat Feb 11 12:50:04 2017 +0000

      iptables: stop 'fixing' kernel sysctl bridge firewalling knobs
      
      Those are different on different kernel versions, and have reasonable
      default values on all newer kernel versions, including RHEL. We
      nevertheless made devstack to set those in the past; now I propose to
      clean the code from neutron tree and leave it up to deployment tools to
      fix in an unlikely case the system has broken default values.
      
      Now that iptables firewall code does not trigger sysctl, we can also
      remove this filter from the corresponding rootwrap .filters file.
      
      DocImpact make sure deployment docs mention the expected sysctl knob
                values.
      
      Change-Id: Iabf61021c90b0536be274463d48fb5a572ecc023
      Related-Bug: #1622914

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1672922/+subscriptions