Learning OpenStack Networking - Third Edition

Firewall driver

The firewall_driver configuration option instructs Neutron to use a particular firewall driver for security group functionality. There may be different firewall drivers configured based on the Mechanism driver in use.

Update the ML2 configuration file on controller01 and compute01 and define the appropriate firewall_driver in the [securitygroup] section on a single line:

[securitygroup]...firewall_driver = iptables

If you do not want to use a firewall, and want to disable the application of security group rules, set firewall_driver to noop.