August 2018
Beginner
462 pages
12h 36m
English
The enable_security_group configuration option instructs Neutron to enable or disable security group-related API functions. This option is set to true by default.
The enable_ipset configuration option instructs Neutron to enable or disable the ipset extension for iptables when the iptables_hybrid firewall driver is used. The use of ipsets allows for the creation of firewall rules that match entire sets of addresses at once rather than having individual lines per address, making lookups very efficient compared to traditional linear lookups. This option is set to true by default.
Read now
Unlock full access