Skip to content

Commit a88aa18

Browse files
Zuulopenstack-gerrit
authored andcommitted
Merge "Fix the issue of losing nf_conntrace* values after a reboot."
2 parents 95ae83d + 2643a76 commit a88aa18

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

octavia/amphorae/backends/agent/api_server/templates/amphora-netns.systemd.j2

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@ RemainAfterExit=yes
1010
ExecStart=-/sbin/ip netns add {{ amphora_nsname }}
1111
# Load the system sysctl into the new namespace
1212
ExecStart=-/sbin/ip netns exec {{ amphora_nsname }} sysctl --system
13+
# Enable kernel module ip_vs for lvs function in amphora network namespace
14+
ExecStart=-/sbin/ip netns exec {{ amphora_nsname }} modprobe ip_vs
1315
# Set nf_conntrack_buckets sysctl in the main namespace (nf_conntrack_buckets
1416
# cannot be set in another net namespace, but its value is inherited from the
1517
# main namespace)
1618
ExecStart=-/sbin/sysctl -w net.netfilter.nf_conntrack_buckets=125000
1719
# Update conntrack table sizes using the formula for the default values
1820
ExecStart=-/sbin/sysctl -w net.netfilter.nf_conntrack_max=125000
1921
ExecStart=-/sbin/sysctl -w net.netfilter.nf_conntrack_expect_max=488
20-
# Enable kernel module ip_vs for lvs function in amphora network namespace
21-
ExecStart=-/sbin/ip netns exec {{ amphora_nsname }} modprobe ip_vs
2222
# Enable ip_forward and conntrack kernel configuration
2323
ExecStart=-/sbin/ip netns exec {{ amphora_nsname }} sysctl -w net.ipv4.ip_forward=1
2424
ExecStart=-/sbin/ip netns exec {{ amphora_nsname }} sysctl -w net.ipv4.vs.conntrack=1
Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
fixes:
3+
- |
4+
Fix the issue where nf_conntrack* opts values are lost after rebooting the Amphora VM.
5+
more details `Story 2010795 <https://storyboard.openstack.org/#!/story/2010795>`__

0 commit comments

Comments
 (0)