Revision history [back]

For OVS 2.5 you could use the following:

[SECURITYGROUP]
firewall_driver=neutron.plugins.hyperv.agent.security_groups_driver.HyperVSecurityGroupsDriver
enable_security_group=true

The above will use Windows ACL's (https://technet.microsoft.com/en-us/library/dn464278.aspx)

For OVS 2.6 you have two options. One is the above and the other is:

[SECURITYGROUP]
enable_security_group=true
firewall_driver = openvswitch

This will use conntrack from OVS. Small caveat it does not support IPv6 and also does not support IPv4 fragments.

Thanks, Alin.