Description of problem: There is an RFE bz1619266 to support security group logging with ml2/OVN plugin. There are three configurable parameters available for the feature: - `service_plugins` list. Contains the list of all the available service plugins. Can be modified on deployment with the `NeutronServicePlugins` parameter. - `rate_limit`. Meter option to limit the packet rate of the logs that are sent to the OVN controller. Can't be customized on deployment using Tripleo. As per upstream documentation [1] it can be configured with `neutron.conf.services.logging.log_driver_opts` or just with `rate_limit` option under the `network_log` section of the neutron.conf file (neutron_api container). - `burst_limit`. Meter option to increase the packet rate limit by the specified value for a short period of time (to allow sikes). Can't be customized on deployment using Tripleo. As per upstream documentation [1] it can be configured with `neutron.conf.services.logging.log_driver_opts` or just with `rate_limit` option under the `network_log` section of the neutron.conf file (neutron_api container). That functionality has been already implemented for the ml2/OVS but with the same limitation (not possible to customize on deployment). It requires additional parameters to be configurable (as per documentation [2]): - `extensions` list. Contains the list of ovs extensions. Can be configured with `extensions` parameter under `agent` section of openvswitch_agent.ini file (compute/networker node) or ml2_conf.ini file (controller node). - `local_output_log_base`. Path to the log file. Can be configured on compute/networker node with `local_output_log_base` parameter under `network_log` section of openvswitch_agent.ini file (security group logging) or l3_agent.ini file (firewall group logging). - `rate_limit` and `burst_limit` should be configured on compute/networker nodes (unlike ml2/OVN implementation) under `network_log` section of openvswitch_agent.ini file (security group logging) or l3_agent.ini file (firewall group logging). Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: [1] https://docs.openstack.org/neutron/latest/contributor/internals/ovn/ovn_network_logging.html [2] https://docs.openstack.org/neutron/wallaby/admin/config-logging.html
Hi, why did this change from 16.2 to 17? Can we change it back? @ccamposr Kind regards, Elvira
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.4), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:8794