Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
113 commits
Select commit Hold shift + click to select a range
01140fa
Hacks to work for m3 use case
abattye Jan 23, 2017
cd502d2
Merge branch 'mitaka' of https://github.com/F5Networks/f5-openstack-a…
abattye Feb 6, 2017
6d44959
Apple existing patches - common networks and disable certificate veri…
abattye Feb 9, 2017
1d0c2b0
Catch and log route creation issues. Its causing issues during deleti…
abattye Feb 9, 2017
2a20ec2
Get loadbalancers per network via RPC
abattye Feb 28, 2017
9882f3d
Patch for default pool switching support
abattye Apr 5, 2017
bb9bc9f
Merge tag 'v9.3.0' into mitaka-m3
abattye Apr 21, 2017
30d70f6
All members that are not neutron ports - for external IP support
abattye Apr 21, 2017
363c9d8
Fix to use ESD with L4 VS 0 switch to standard TCP on apply and back …
abattye Apr 26, 2017
eb0d669
Prevent update failure in case address js missing in member
abattye May 2, 2017
d5c0bb2
Try to make sure pools are created if missing
abattye May 30, 2017
4e51950
create pools before listeners
abattye May 30, 2017
c96e190
A nice chicken and egg sandwich to unpick tomorrow
abattye May 30, 2017
9c69204
Merge with 9.3.1.b1 upstream
abattye May 31, 2017
b5a6314
Assure pool created before configuring any listeners it may be attach…
abattye May 31, 2017
d5c744e
Fix typo
abattye May 31, 2017
e5f1667
Handle case where virtual address is out of sync with route domain
abattye Jun 6, 2017
f42ee0c
This seems like a blatant typo, causes any LB with L7 rules on to fai…
abattye Jun 6, 2017
ab71ed7
Include LBs in error status, not just active ones
abattye Jun 6, 2017
9a28986
Merge tag 'v9.3.1' of https://github.com/F5Networks/f5-openstack-agen…
abattye Jun 8, 2017
c6cc30b
Missed previous patch in merge
abattye Jun 8, 2017
03328ec
Sync and check objects in provisioning status of ERROR
abattye Jun 9, 2017
8aba826
Don’t set active if pending delete
abattye Jun 13, 2017
45e6488
Don’t interfere with LBs in pending delete
abattye Jun 13, 2017
7bcce32
Add guard for missing loadbalancer in service
abattye Jun 14, 2017
7ed39b1
Initial fix to support VS VIP as snat pool IP
abattye Aug 30, 2017
ce2f856
Add commands for individual sync and delete,
abattye Sep 5, 2017
e8df675
Add sync all cli action and check for input parameters
abattye Sep 5, 2017
4cb67c7
Remove some noise from the logs
abattye Sep 13, 2017
a9c4031
If VS has an ESD ensure its a standard TCP VS not fastL4 to avoid 400…
abattye Sep 13, 2017
94f3769
Ensure VLAN is included during update
abattye Sep 13, 2017
2db8a30
Add some instrumentation and improve queue handling for backlogged re…
abattye Sep 19, 2017
93d147f
Fix l7 policy wrappers to exist per VS so we can have more than one V…
abattye Sep 19, 2017
d4aba74
Added ESD's for x-forwarded-for, http-compression and one-connect.
tlesmann Sep 28, 2017
d600830
Begin to make ESD actually usable for more than the most basic use cases
abattye Sep 28, 2017
eb360d2
Changes in esd apply/remove logic
tlesmann Sep 29, 2017
dc96e71
More ESD updates - make changes fail in VS updates if incompatible, n…
abattye Sep 29, 2017
47c82c0
Refactor to apply esds as basis of listener update
abattye Sep 29, 2017
a77e7a2
Fix one connect example
abattye Oct 2, 2017
86bfe02
Remove comments
abattye Oct 2, 2017
28cdbbf
Remove ® non ascii char
abattye Oct 11, 2017
7400a4f
Take care on TLS listener settings in esd apply mechanism
tlesmann Oct 12, 2017
f15dd0d
Implementation of SSL client profile handling in case of listener upd…
tlesmann Oct 19, 2017
f5e0dc0
Create and use SSL profile with right Default SNI Flag
tlesmann Oct 20, 2017
4985d88
Don't create L7Policies for ESD's in F5 when an L7Policy+Rule is adde…
tlesmann Oct 25, 2017
9048645
Reduce Log output in l7policy build and do not pretty print result
tlesmann Oct 25, 2017
8f025de
Disable debugging
tlesmann Oct 25, 2017
9b40e11
Set Default TLS Cert also as Trusted Cert for client authentication. …
tlesmann Nov 3, 2017
9b87671
Revert Trusted Ca for Client Authentication. Doesn't work due to F5 e…
tlesmann Nov 6, 2017
72206b1
Fix for TCP Listeners: Don't apply oneconnect when FastL4
tlesmann Nov 7, 2017
4b1bbb1
Use intermediate certificates as chain and for caClientTrust.
tlesmann Nov 14, 2017
1be78b5
Ignore exceptions when SSL Profiles are created or deleted or attache…
tlesmann Nov 20, 2017
c92cf3f
Fix handling when Listener Certificate is also used as SNI certificate.
tlesmann Nov 21, 2017
6703246
Added esd for http/https redirect and sso required
tlesmann Dec 12, 2017
cae9560
LBaaS:
tlesmann Jan 16, 2018
39a55a9
Fix for F5 upgrade to release 12.1.3. vlan creation fails because a t…
tlesmann Jan 19, 2018
a7cfe92
Fix for F5 upgrade to release 12.1.3. vlan creation fails because a t…
tlesmann Jan 19, 2018
6f0fb17
Fix error in VS IP retrieval in case of SNAT
tlesmann Jan 30, 2018
41e82af
do periodic orphan cleaning every 6 hours
notandy Mar 9, 2018
df64d3c
Revert "do periodic orphan cleaning every 6 hours"
tlesmann Mar 23, 2018
86494bb
This reverts commit df64d3c and fixes SNAT orphan cleaning
notandy Mar 23, 2018
9250937
fixed logging error
notandy Mar 27, 2018
0510116
added holzhammer command to f5 cli: cleans partition and resyncs it
notandy Mar 28, 2018
41e862a
fixed purge_folder and fixed tag-mode exceptions
notandy Apr 6, 2018
100088e
fixed f5 util, added druckhammer command that completley purges F5
notandy Apr 6, 2018
7b7d504
Dev/mitaka m3 (#1)
tlesmann Jul 3, 2018
1f4790a
Fix: Orphan pool handling. Delete pool only if available
tlesmann Jul 3, 2018
9cfaa67
Disable orphan cleaning as safety measure until data inconsistencies …
tlesmann Jul 4, 2018
a7f8354
F5 agent: Enable snap pool cleaning again
tlesmann Jul 6, 2018
acb2315
Fix wrong naming for capacity_score attribute
tlesmann Jul 11, 2018
cbb5ae4
Scheduling: Add virtuals and virtual_address as metrics for capacity …
tlesmann Jul 11, 2018
af5030a
enable orphan cleanup by configuration switch ccloud_orphans_cleanup_…
tlesmann Jul 11, 2018
0d8cb5d
Orphans: Configure Interval and TESTRUN mode for orphan cleanup
tlesmann Jul 12, 2018
fce10bd
LBaaS: Fix params for orphan cleanup
tlesmann Jul 13, 2018
98164c2
LBaaS: Added params for orphan cleanup
tlesmann Jul 13, 2018
3077edf
Try to fix orphan node cleaner (cyclic dependency)
tlesmann Jul 17, 2018
61d046c
LBaaS: Fix cyclic reference bug inside orphan member deletion
tlesmann Jul 18, 2018
f424758
Fix
tlesmann Jul 18, 2018
a282abd
LBaaS: Get orphan members with wrong port numbers
tlesmann Jul 19, 2018
f576bc6
Fix 'Module not callable' because of module time double import
tlesmann Jul 20, 2018
78c3931
LBaaS: Don't abort orphan cleanup in case of a snat pool deletion err…
tlesmann Jul 24, 2018
be5ef3e
LBaaS: Disable orphan cleanup on f5 device if missing loadbalancer ag…
tlesmann Jul 27, 2018
6a4cffc
LBaaS: Better message output for Missing Bindings
tlesmann Jul 27, 2018
7e5f765
LBaaS: Lower the level of some error messages in F5 agent to warning/…
tlesmann Aug 7, 2018
9cd9f8b
Fix start time issue if more than 3 env groups exists (as in qa now)
tlesmann Aug 7, 2018
7df7c87
Fix creation of vs without rd.
tlesmann Oct 31, 2018
2e52a66
LBaaS: Clean orphan cache more reliable after 24 hours
tlesmann Nov 27, 2018
ddf6b85
Fix error inside orphan cache log message
tlesmann Jan 16, 2019
a138100
Better robustness to sync ha pair members which are out of sync due t…
tlesmann Dec 17, 2018
b1d05fb
Improved handling for inactive agents to support upgrade of F5 device…
tlesmann Jan 16, 2019
1315670
LBaaS: clean up messages and flow in periodic resync
tlesmann Jan 17, 2019
736a31d
LBaaS: clean up messages in periodic resync #2
tlesmann Jan 17, 2019
deb8538
Fix pool lb method for members with weight. Ratio methods get lost in…
tlesmann Jan 23, 2019
304ce00
Periodic schedule (#3)
tlesmann Jan 23, 2019
5ad53e2
LBaaS: Delayed start for Full Cache sync and orphan cleanup
tlesmann Jan 23, 2019
89a5c8b
LBaaS: Fix Delayed start for Full Cache sync and orphan cleanup in QA
tlesmann Jan 24, 2019
a675cf5
Fix typo in capacity_score
tlesmann Jan 24, 2019
b8a1536
Fix Bug for is_agent_down.
tlesmann Feb 13, 2019
86e70ae
Supress ERROR message for pending loadbalancer refreshing
tlesmann Feb 14, 2019
b9f7f5a
Do not run periodic tasks and report state in case of cli_sync calls …
tlesmann Feb 18, 2019
b13ef55
Use mtu size from L2Network Layer for VLAN creation
tlesmann Feb 21, 2019
7085b7a
Do not update cache without service object
tlesmann Mar 18, 2019
0982a4f
LBaaS: Disarm messages for pool member status updates in case member …
tlesmann Apr 4, 2019
50a82b2
LBaaS: Bugfix for default-pool/listener updates which prevents downti…
tlesmann Apr 16, 2019
eca2d47
Better resilience against F5 connection issues during startup phase
tlesmann Jun 25, 2019
1c8d7c5
Switch TCP listeners from fastL4 to new standard profile cc_fastL4. N…
tlesmann Jun 25, 2019
253812c
Fix Loadbalancer Error state during creation in case that network isn…
tlesmann Jul 9, 2019
9ea9eb7
Rework of assure_service logic to support terraform, ... better. (#4)
tlesmann Jul 22, 2019
348d4fc
Security fix
tlesmann Oct 23, 2019
5c42b78
Set hardwareSyncookie on VLAN to enable SYN Flood protection
tlesmann Nov 5, 2019
d83a2b2
support for ssl key passphrases
notandy Feb 11, 2020
4cf3e9a
added missing get_private_key_passphrase
notandy Feb 12, 2020
61e19c8
fix rename of key_passphrase
notandy Feb 12, 2020
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/ISSUE_TEMPLATE.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,10 +22,10 @@
<Fill in the OpenStack release, such as Liberty>

#### Description
<Describe the bug in detail, steps taken prior to encountering the issue, yand a short explanation of you have deployed openstack and F5® agent>
<Describe the bug in detail, steps taken prior to encountering the issue, yand a short explanation of you have deployed openstack and F5 agent>

#### Deployment
<Explain in reasonable detail your OpenStack deployment, the F5® OpenStack agent, and BIG-IP®(s)>
<Example: Single OpenStack controller with one F5® agent managing a cluster of 4 BIG-IP® VEs>
<Example: Three OpenStack controllers in HA, each with one standalone F5® agent managing a single BIG-IP® appliance>
<Explain in reasonable detail your OpenStack deployment, the F5 OpenStack agent, and BIG-IP(s)>
<Example: Single OpenStack controller with one F5 agent managing a cluster of 4 BIG-IP VEs>
<Example: Three OpenStack controllers in HA, each with one standalone F5 agent managing a single BIG-IP appliance>

1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -115,3 +115,4 @@ logs
# vim
*~
*.swp
*.iml
4 changes: 2 additions & 2 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ $ py.test --cov ./ --cov-report=html
$ open htmlcov/index.html
```

If you are running our functional tests you will need a real BIG-IP® to run
If you are running our functional tests you will need a real BIG-IP to run
them against; you can get one of those pretty easily in [Amazon EC2](https://aws.amazon.com/marketplace/pp/B00JL3UASY/ref=srh_res_product_title?ie=UTF8&sr=0-10&qid=1449332167461).

## License
Expand All @@ -77,4 +77,4 @@ See the License for the specific language governing permissions and
limitations under the License.

### Contributor License Agreement
Individuals or business entities who contribute to this project must have completed and submitted the [F5® Contributor License Agreement](http://f5-openstack-docs.readthedocs.org/en/latest/cla_landing.html#cla-landing) to Openstack_CLA@f5.com prior to their code submission being included in this project.
Individuals or business entities who contribute to this project must have completed and submitted the [F5 Contributor License Agreement](http://f5-openstack-docs.readthedocs.org/en/latest/cla_landing.html#cla-landing) to Openstack_CLA@f5.com prior to their code submission being included in this project.
10 changes: 5 additions & 5 deletions README.rst
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ f5-openstack-agent
Introduction
************

The F5® agent translates from 'OpenStack' to 'F5®'. It uses the `f5-sdk <http://f5-sdk.readthedocs.io>`_ to translate OpenStack messaging calls -- such as those from the Neutron RPC messaging queue -- into iControl® REST calls to F5® technologies, such as BIG-IP®.
The F5 agent translates from 'OpenStack' to 'F5'. It uses the `f5-sdk <http://f5-sdk.readthedocs.io>`_ to translate OpenStack messaging calls -- such as those from the Neutron RPC messaging queue -- into iControl REST calls to F5 technologies, such as BIG-IP.

Documentation
*************
Expand All @@ -34,9 +34,9 @@ Documentation is published on Read the Docs, at http://f5-openstack-agent.readth
Compatibility
*************

The F5® OpenStack agent is compatible with OpenStack releases from Liberty forward. If you are using Kilo or earlier, you'll need the `LBaaSv1 plugin <http://f5-openstack-lbaasv1.readthedocs.io>`_.
The F5 OpenStack agent is compatible with OpenStack releases from Liberty forward. If you are using Kilo or earlier, you'll need the `LBaaSv1 plugin <http://f5-openstack-lbaasv1.readthedocs.io>`_.

See the `F5® OpenStack Releases and Support Matrix <http://f5-openstack-docs.readthedocs.org/en/latest/releases_and_versioning.html>`_ for more information.
See the `F5 OpenStack Releases and Support Matrix <http://f5-openstack-docs.readthedocs.org/en/latest/releases_and_versioning.html>`_ for more information.

Installation
************
Expand All @@ -59,7 +59,7 @@ Test
****
Before you open a pull request, your code must have passing
`pytest <http://pytest.org>`__ unit tests. In addition, you should
include a set of functional tests written to use a real BIG-IP® device
include a set of functional tests written to use a real BIG-IP device
for testing. Information on how to run our set of tests is included
below.

Expand Down Expand Up @@ -160,7 +160,7 @@ limitations under the License.
Contributor License Agreement
=============================

Individuals or business entities who contribute to this project must have completed and submitted the `F5® Contributor License Agreement <http://f5-openstack-docs.readthedocs.org/en/latest/cla_landing.html#cla-landing>`_ to Openstack\_CLA@f5.com prior to their code submission being included in this project.
Individuals or business entities who contribute to this project must have completed and submitted the `F5 Contributor License Agreement <http://f5-openstack-docs.readthedocs.org/en/latest/cla_landing.html#cla-landing>`_ to Openstack\_CLA@f5.com prior to their code submission being included in this project.


.. |Build Status| image:: https://travis-ci.org/F5Networks/f5-openstack-agent.svg?branch=liberty
Expand Down
6 changes: 6 additions & 0 deletions dev_install
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
#git init
python setup.py install

python /var/lib/openstack/bin/f5-oslbaasv2-agent --config-file /etc/neutron/f5-oslbaasv2-agent.ini --config-file /etc/neutron/neutron.conf --log-file /var/log/neutron/f5-agent.log

#python /var/lib/kolla/venv/bin/f5-oslbaasv2-purge --config-file /etc/neutron/f5-oslbaasv2-agent.ini --partition 234
6 changes: 3 additions & 3 deletions docs/index.rst
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
.. _home:

F5® OpenStack Agent
F5 OpenStack Agent
===================

|Build Status| |Docs Build Status|
Expand Down Expand Up @@ -28,13 +28,13 @@ Installation
.. include:: topic_install-f5-agent.rst
:start-line: 3

For more information about using F5® technologies in OpenStack with Neutron LBaaSv2, please see the :ref:`f5-openstack-lbaasv2-driver documentation <lbaasv2driver:home>`.
For more information about using F5 technologies in OpenStack with Neutron LBaaSv2, please see the :ref:`f5-openstack-lbaasv2-driver documentation <lbaasv2driver:home>`.


Configuration and Usage
-----------------------

See the :ref:`F5® OpenStack LBaaSv2 documentation <lbaasv2driver:home>`.
See the :ref:`F5 OpenStack LBaaSv2 documentation <lbaasv2driver:home>`.


.. |Build Status| image:: https://travis-ci.org/F5Networks/f5-openstack-agent.svg?branch=liberty
Expand Down
2 changes: 1 addition & 1 deletion docs/ref_agent-config-file.rst
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
Agent Configuration File
------------------------

A sample F5® OpenStack agent configuration file is shown below. The file can be found at ``/etc/neutron/services/f5/f5-openstack-agent.ini``. When setting up your own F5® agent(s), be sure to use the correct information for your environment.
A sample F5 OpenStack agent configuration file is shown below. The file can be found at ``/etc/neutron/services/f5/f5-openstack-agent.ini``. When setting up your own F5 agent(s), be sure to use the correct information for your environment.

.. literalinclude:: ../etc/neutron/services/f5/f5-openstack-agent.ini

2 changes: 1 addition & 1 deletion etc/init.d/f5-oslbaasv2-agent
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: f5-openstack-agent
# Description: Provides the F5® OpenStack agent to configure BIG-IP®
# Description: Provides the F5 OpenStack agent to configure BIG-IP
### END INIT INFO

PROJECT_NAME=neutron
Expand Down
47 changes: 47 additions & 0 deletions etc/neutron/services/f5/esd/esd.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
{
"proxy_protocol_2edF_v1_0": {
"lbaas_fastl4": "",
"lbaas_ctcp": "tcp",
"lbaas_irule": ["proxy_protocol_2edF_v1_0"],
"lbaas_one_connect": ""
},
"proxy_protocol_V2_e8f6_v1_0": {
"lbaas_fastl4": "",
"lbaas_ctcp": "tcp",
"lbaas_irule": ["cc_proxy_protocol_V2_e8f6_v1_0"],
"lbaas_one_connect": ""
},
"fastl4_protocol_keepalive_dd2b_v1_0": {
"lbaas_fastl4": "cc_fastl4",
"lbaas_one_connect": ""
},
"standard_tcp_a3de_v1_0": {
"lbaas_fastl4": "",
"lbaas_ctcp": "tcp",
"lbaas_one_connect": ""
},
"x_forward_5b6e_v1_0": {
"lbaas_irule": ["cc_x_forward_5b6e_v1_0"]
},
"one_connect_dd5c_v1_0": {
"lbaas_one_connect": "oneconnect"
},
"no_one_connect_3caB_v1_0": {
"lbaas_one_connect": ""
},
"http_compression_e4a2_v1_0": {
"lbaas_http_compression": "cc_http_compression_e4a2_v1_0"
},
"cookie_encryption_b82a_v1_0": {
"lbaas_irule": ["cc_cookie_encryption_b82a_v1_0"]
},
"sso_22b0_v1_0": {
"lbaas_irule": ["cc_sso_22b0_v1_0"]
},
"sso_required_f544_v1_0": {
"lbaas_irule": ["cc_sso_required_f544_v1_0"]
},
"http_redirect_a26c_v1_0": {
"lbaas_irule": ["cc_http_redirect_a26c_v1_0"]
}
}
71 changes: 36 additions & 35 deletions etc/neutron/services/f5/f5-openstack-agent.ini
Original file line number Diff line number Diff line change
Expand Up @@ -50,17 +50,17 @@ periodic_interval = 10
# Environment Settings
###############################################################################
#
# Since many TMOS® object names must start with an alpha character
# Since many TMOS object names must start with an alpha character
# the environment_prefix is used to prefix all service objects.
#
# Objects created on the BIG-IP® by this agent will have their names prefixed
# Objects created on the BIG-IP by this agent will have their names prefixed
# by an environment string. This allows you set this string. The default is
# 'Project'.
#
# WARNING - you should only set this before creating any objects. If you change
# it with established objects, the objects created with an alternative prefix,
# will no longer be associated with this agent and all objects in neutron
# and on the the BIG-IP® associated with the old environment will need to be managed
# and on the the BIG-IP associated with the old environment will need to be managed
# manually.
#
# environment_prefix = 'Project'
Expand Down Expand Up @@ -183,10 +183,10 @@ f5_external_physical_mappings = default:1.1:True
# Some systems require the need to bind and prune VLANs ids
# allowed to specific ports, often for security.
#
# An example would be if a LBaaS iControl® endpoint is using
# An example would be if a LBaaS iControl endpoint is using
# tagged VLANs. When a VLAN tagged network is added to a
# specific BIG-IP® device, the facing switch port will need
# to allow traffic for that VLAN tag through to the BIG-IP®'s
# specific BIG-IP device, the facing switch port will need
# to allow traffic for that VLAN tag through to the BIG-IP's
# port for traffic to flow.
#
# What is required is a software hook which allows the binding.
Expand All @@ -197,16 +197,16 @@ f5_external_physical_mappings = default:1.1:True
# vlan_binding_driver = f5.oslbaasv1agent.drivers.bigip.vlan_binding.NullBinding
#
# The interface_port_static_mappings allows for a JSON encoded dictionary
# mapping BIG-IP® devices and interfaces to corresponding ports. A port id can be
# mapping BIG-IP devices and interfaces to corresponding ports. A port id can be
# any string which is meaningful to a vlan_binding_driver. It can be a
# switch_id and port, or it might be a neutron port_id.
#
# In addition to any static mappings, when the iControl® endpoints
# In addition to any static mappings, when the iControl endpoints
# are initialized, all their TMM interfaces will be collect
# for each device and neutron will be queried to see if which
# device port_ids correspond to known neutron ports. If they do,
# automatic entries for all mapped port_ids will be made referencing
# the BIG-IP® device name and interface and the neutron port_ids.
# the BIG-IP device name and interface and the neutron port_ids.
#
# interface_port_static_mappings = {"device_name_1":{"interface_ida":"port_ida","interface_idb":"port_idb"}, {"device_name_2":{"interface_ida":"port_ida","interface_idb":"port_idb"}}
#
Expand All @@ -216,7 +216,7 @@ f5_external_physical_mappings = default:1.1:True
#
# Device Tunneling (VTEP) Self IPs
#
# This is the name of a BIG-IP® self IP address to use for VTEP addresses.
# This is the name of a BIG-IP self IP address to use for VTEP addresses.
#
# If no gre or vxlan tunneling is required, these settings should be
# commented out or set to None.
Expand Down Expand Up @@ -265,10 +265,10 @@ f5_populate_static_arp = False
#
# Device Tunneling (VTEP) self IPs
#
# This is a boolean entry which determines if the BIG-IP® will use
# This is a boolean entry which determines if the BIG-IP will use
# L2 Population service to update its fdb tunnel entries. This needs
# to be set up in accordance with the way the other tunnel agents are
# set up. If the BIG-IP® agent and other tunnel agents don't match
# set up. If the BIG-IP agent and other tunnel agents don't match
# the tunnel setup will not work properly.
#
l2_population = True
Expand Down Expand Up @@ -303,13 +303,13 @@ l2_population = True
# L3 Segmentation Mode Settings
###############################################################################
#
# Global Routed Mode - No L2 or L3 Segmentation on BIG-IP®
# Global Routed Mode - No L2 or L3 Segmentation on BIG-IP
#
# This setting will cause the agent to assume that all VIPs
# and pool members will be reachable via global device
# L3 routes, which must be already provisioned on the BIG-IP®s.
# L3 routes, which must be already provisioned on the BIG-IPs.
#
# In f5_global_routed_mode, BIG-IP® will not assume L2
# In f5_global_routed_mode, BIG-IP will not assume L2
# adjacentcy to any neutron network, therefore no
# L2 segementation between tenant services in the data plane
# will be provisioned by the agent. Because the routing
Expand All @@ -320,22 +320,22 @@ l2_population = True
#
# WARNING: setting this mode to True will override
# the use_namespaces, setting it to False, because only
# one global routing space will used on the BIG-IP®. This
# one global routing space will used on the BIG-IP. This
# means overlapping IP addresses between tenants is no
# longer supported.
#
# WARNING: setting this mode to True will override
# the f5_snat_mode, setting it to True, because pool members
# will never be considered L2 adjacent to the BIG-IP® by
# will never be considered L2 adjacent to the BIG-IP by
# the agent. All member access will be via L3 routing, which
# will need to be set up on the BIG-IP® before LBaaS provisions
# will need to be set up on the BIG-IP before LBaaS provisions
# resources on behalf of tenants.
#
# WARNING: setting this mode to True will override the
# f5_snat_addresses_per_subnet, setting it to 0 (zero).
# This will force all VIPs to use AutoMap SNAT for which
# enough Self IP will need to be pre-provisioned on the
# BIG-IP® to handle all pool member connections. The SNAT,
# BIG-IP to handle all pool member connections. The SNAT,
# an L3 mechanism, will all be global without reference
# to any specific tenant SNAT pool.
#
Expand All @@ -344,7 +344,7 @@ l2_population = True
# because no L2 information will be taken from
# neutron, thus making the assumption that all VIP
# L3 addresses will be globally routable without
# segmentation at L2 on the BIG-IP®.
# segmentation at L2 on the BIG-IP.
#
f5_global_routed_mode = True
#
Expand Down Expand Up @@ -399,14 +399,14 @@ f5_route_domain_strictness = False
# This setting will force the use of SNATs.
#
# If this is set to False, a SNAT will not
# be created (routed mode) and the BIG-IP®
# be created (routed mode) and the BIG-IP
# will attempt to set up a floating self IP
# as the subnet's default gateway address.
# and a wild card IP forwarding virtual
# server will be set up on member's network.
# Setting this to False will mean Neutron
# floating self IPs will not longer work
# if the same BIG-IP® device is not being used
# if the same BIG-IP device is not being used
# as the Neutron Router implementation.
#
# This setting will be forced to True if
Expand Down Expand Up @@ -444,16 +444,16 @@ f5_common_external_networks = True
# separated list where if the name is a neutron
# network id used for a vip or a pool member,
# the network should not be created or deleted
# on the BIG-IP®, but rather assumed that the value
# on the BIG-IP, but rather assumed that the value
# is the name of the network already created in
# the Common partition with all L3 addresses
# assigned to route domain 0. This is useful
# for shared networks which are already defined
# on the BIG-IP® prior to LBaaS configuration. The
# on the BIG-IP prior to LBaaS configuration. The
# network should not be managed by the LBaaS agent,
# but can be used for VIPs or pool members
#
# If your Internet VLAN on your BIG-IP® is named
# If your Internet VLAN on your BIG-IP is named
# /Common/external, and that corresponds to
# Neutron uuid: 71718972-78e2-449e-bb56-ce47cc9d2680
# then the entry would look like:
Expand All @@ -472,7 +472,7 @@ f5_common_external_networks = True
# Some systems require the need to bind L3 addresses
# to specific ports, often for security.
#
# An example would be if a LBaaS iControl® endpoint is using
# An example would be if a LBaaS iControl endpoint is using
# untagged VLANs and is a nova guest instance. By
# default, neutron will attempt to apply security rule
# for anti-spoofing which will not allow just any L3
Expand All @@ -492,7 +492,7 @@ f5_common_external_networks = True
# vary between providers. They may look like a neutron port id
# and a nova guest instance id.
#
# In addition to any static mappings, when the iControl® endpoints
# In addition to any static mappings, when the iControl endpoints
# are initialized, all their TMM MAC addresses will be collect
# and neutron will be queried to see if the MAC addresses
# correspond to known neutron ports. If they do, automatic entries
Expand All @@ -511,7 +511,7 @@ f5_bigip_lbaas_device_driver = f5_openstack_agent.lbaasv2.drivers.bigip.icontrol
#
#
###############################################################################
# Device Driver - iControl® Driver Setting
# Device Driver - iControl Driver Setting
###############################################################################
#
# icontrol_hostname is valid for external device type only.
Expand All @@ -524,17 +524,17 @@ f5_bigip_lbaas_device_driver = f5_openstack_agent.lbaasv2.drivers.bigip.icontrol
# is not standalone, all devices in the sync failover
# device group for the hostname specified must have
# their management IP address reachable to the agent.
# If order to access devices' iControl® interfaces via
# If order to access devices' iControl interfaces via
# self IPs, you should specify them as a comma
# separated list below.
#
icontrol_hostname = 10.190.7.232
#
# If you are using vCMP® with VLANs, you will need to configure
# your vCMP® host addresses, in addition to the guests addresses.
# vCMP® Host access is necessary for provisioning VLANs to a guest.
# Use icontrol_hostname for vCMP® guests and icontrol_vcmp_hostname
# for vCMP® hosts. The plug-in will automatically determine
# If you are using vCMP with VLANs, you will need to configure
# your vCMP host addresses, in addition to the guests addresses.
# vCMP Host access is necessary for provisioning VLANs to a guest.
# Use icontrol_hostname for vCMP guests and icontrol_vcmp_hostname
# for vCMP hosts. The plug-in will automatically determine
# which host corresponds to each guest.
#
# icontrol_vcmp_hostname = 192.168.1.245
Expand Down Expand Up @@ -585,4 +585,5 @@ os_project_domain_name = default
# inherit settings from the parent you define. This must be an existing profile,
# and if it does not exist on your BIG-IP system the agent will use the default
# profile, clientssl.
f5_parent_ssl_profile = clientssl
f5_parent_ssl_profile = cc_clientssl
f5_parent_https_monitor = /Common/cc_https
Loading