From 061190d01d51635f9b24cedefeeb64dc97ee5fd4 Mon Sep 17 00:00:00 2001 From: Richard Maw Date: Wed, 15 Apr 2015 05:02:24 +0000 Subject: OpenStack: Disable rp filtering This drop-in file will be processed by systemd on boot. Change-Id: I055d22dd481cc5084f6dbacbb787c3015d75461e --- openstack/manifest | 2 ++ openstack/usr/lib/sysctl.d/neutron.conf | 3 +++ 2 files changed, 5 insertions(+) create mode 100644 openstack/usr/lib/sysctl.d/neutron.conf diff --git a/openstack/manifest b/openstack/manifest index 3b32f813..072c647b 100644 --- a/openstack/manifest +++ b/openstack/manifest @@ -112,6 +112,8 @@ 0040755 0 0 /usr/share/openstack/rabbitmq 0100644 0 0 /usr/share/openstack/rabbitmq/rabbitmq-env.conf 0100644 0 0 /usr/share/openstack/rabbitmq/rabbitmq.config +0040755 0 0 /usr/lib/sysctl.d +0100644 0 0 /usr/lib/sysctl.d/neutron.conf 0100644 0 0 /usr/lib/systemd/system/apache-httpd.service 0100644 0 0 /usr/lib/systemd/system/openstack-keystone.service 0100644 0 0 /usr/lib/systemd/system/openstack-keystone-setup.service diff --git a/openstack/usr/lib/sysctl.d/neutron.conf b/openstack/usr/lib/sysctl.d/neutron.conf new file mode 100644 index 00000000..644ca116 --- /dev/null +++ b/openstack/usr/lib/sysctl.d/neutron.conf @@ -0,0 +1,3 @@ +# Disable rp filtering, enabling forwarding is handled by networkd +net.ipv4.conf.all.rp_filter=0 +net.ipv4.conf.default.rp_filter=0 -- cgit v1.2.1