OpenStack RDO 部署流程 - 4（Neutron安全組）
Neutron安全組的配置需要仔細。
需要在所有計算節點上配置：
/etc/nova/nova.conf:
# 該配置項有時候會遺漏，導致iptables策略無法生效
libvirt_vif_driver = nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver
linuxnet_interface_driver =nova.network.linux_net.LinuxOVSInterfaceDriver
# 讓Nova在調用安全組API時，直接通知neutron處理
security_group_api = neutron
# 配置Nova禁用firewalldriver
firewall_driver = nova.virt.firewall.NoopFirewallDriver
/etc/neutron/ovs_neutron_plugin.ini:
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver