)]}'
{"doc/source/admin/config-trunking.rst":[{"author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"change_message_id":"e7919d271dc63fc33080eb87dd03684204ba342b","unresolved":false,"context_lines":[{"line_number":323,"context_line":"* In ``neutron-ovs-agent`` the use of ``iptables_hybrid`` firewall driver and"},{"line_number":324,"context_line":"  trunk ports are not compatible with each other. The ``iptables_hybrid``"},{"line_number":325,"context_line":"  firewall is not going to filter the traffic of subports."},{"line_number":326,"context_line":"  Instead use other firewall drivers like ``openvswitch`` or ``noop``."},{"line_number":327,"context_line":""},{"line_number":328,"context_line":"* See `bugs \u003chttps://bugs.launchpad.net/neutron/+bugs?field.tag\u003dtrunk\u003e`__ for"},{"line_number":329,"context_line":"  more information."}],"source_content_type":"text/x-rst","patch_set":1,"id":"5faad753_d7461022","line":326,"range":{"start_line":326,"start_character":63,"end_line":326,"end_character":67},"updated":"2019-09-11 08:54:24.000000000","message":"this one will also not filter any traffic so using it will have exactly same effect as using iptables_hybrid. IMO we can remove it from this recommendation.","commit_id":"6a0dd5378d8f7f1919862cc95a5e486734cc8266"},{"author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"change_message_id":"59c4060df6aefef6d65eeaedca36a0f08ccff0b1","unresolved":false,"context_lines":[{"line_number":323,"context_line":"* In ``neutron-ovs-agent`` the use of ``iptables_hybrid`` firewall driver and"},{"line_number":324,"context_line":"  trunk ports are not compatible with each other. The ``iptables_hybrid``"},{"line_number":325,"context_line":"  firewall is not going to filter the traffic of subports."},{"line_number":326,"context_line":"  Instead use other firewall drivers like ``openvswitch`` or ``noop``."},{"line_number":327,"context_line":""},{"line_number":328,"context_line":"* See `bugs \u003chttps://bugs.launchpad.net/neutron/+bugs?field.tag\u003dtrunk\u003e`__ for"},{"line_number":329,"context_line":"  more information."}],"source_content_type":"text/x-rst","patch_set":1,"id":"5faad753_7a4b7caf","line":326,"range":{"start_line":326,"start_character":63,"end_line":326,"end_character":67},"in_reply_to":"5faad753_6b509133","updated":"2019-09-11 13:19:39.000000000","message":"I agree, it\u0027s not the same definitely. But when speaking about subports it will have the same final result :)\nAnd IMO we should in this note propose only other driver which will filter traffic as user expects when he wants to use iptables_hybrid driver :)\nThx for changing this.","commit_id":"6a0dd5378d8f7f1919862cc95a5e486734cc8266"},{"author":{"_account_id":15554,"name":"Bence Romsics","email":"bence.romsics@gmail.com","username":"ebenrom","status":"working for Ericsson, UTC+1 (+DST)"},"change_message_id":"f2c9859077536b8225d034264df9368af3335e4a","unresolved":false,"context_lines":[{"line_number":323,"context_line":"* In ``neutron-ovs-agent`` the use of ``iptables_hybrid`` firewall driver and"},{"line_number":324,"context_line":"  trunk ports are not compatible with each other. The ``iptables_hybrid``"},{"line_number":325,"context_line":"  firewall is not going to filter the traffic of subports."},{"line_number":326,"context_line":"  Instead use other firewall drivers like ``openvswitch`` or ``noop``."},{"line_number":327,"context_line":""},{"line_number":328,"context_line":"* See `bugs \u003chttps://bugs.launchpad.net/neutron/+bugs?field.tag\u003dtrunk\u003e`__ for"},{"line_number":329,"context_line":"  more information."}],"source_content_type":"text/x-rst","patch_set":1,"id":"5faad753_6b509133","line":326,"range":{"start_line":326,"start_character":63,"end_line":326,"end_character":67},"in_reply_to":"5faad753_d7461022","updated":"2019-09-11 12:14:05.000000000","message":"Done.\n\nI think noop and hybrid is not exactly the same. Hybrid should filter the traffic of the parent port but not subports.","commit_id":"6a0dd5378d8f7f1919862cc95a5e486734cc8266"}]}