Description of problem: In order to enable sctp security group using ovs-conntrack (ovs FW driver) we need to enable this manually on the compute nodes as following: modprobe ip_conntrack_proto_sctp Version-Release number of selected component (if applicable): rhos 11 How reproducible: 100% Actual results: We need to enable "other protocols" for conntrack support Expected results: If we did not have to enable any other protocols in previos FW driver ' the same should be with the ovs FW driver. Director should enable this by default when setting the fw driver to ovs.
This module already loaded: https://github.com/openstack/tripleo-heat-templates/blob/master/puppet/services/kernel.yaml#L38
*** This bug has been marked as a duplicate of bug 1422082 ***