The OpenStack Networking Service provides security group functionality using a mechanism that is more flexible and powerful than the security group capabilities built into OpenStack Compute. Therefore, if you use OpenStack Networking, you should always disable built-in security groups and proxy all security group calls to the OpenStack Networking API . If you do not, security policies will conflict by being simultaneously applied by both services.
To proxy security groups to OpenStack Networking, use the
following configuration values in
nova.conf:
| Item | Configuration |
|
Update to
|
|
Update to |
