yahoo-eng-team team mailing list archive

[Hongbin Lu <1858993@xxxxxxxxxxxxxxxxxx>]

I don't think neutron will change the way to implement the OVS hybrid.
You can try the OVS firewall as @Yulong suggested.

** Changed in: neutron
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1858993

Title:
  Too many security group policies

Status in neutron:
  Won't Fix

Bug description:
  The problem we encountered in production was that when using the
  security group policy for east-west isolation, the current mechanism
  would create a bridge for each virtual machine, and issue the same
  policy for the virtual machine under the same segment. Increasing the
  number of virtual machines will waste more resource and affect system
  performance. So what is the original intention to achieve the purpose?
  whether we should bound the virtual machine on the same node to a same
  bridge, Instead of creating a new bridge for each one

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1858993/+subscriptions