9e45d45348
When Open vSwitch is configured to use a controller, but is unable to connect to it, Open vSwitch will setup flows to allow all traffic, if the failure mode is not configured, or set to standalone. As this might be a security hazard, it is also possible to configure Open vSwitch in a secure failure mode. Enabling this mode causes Open vSwitch to drop all traffic if it is unable to connect to the controller. Redirect stderr of the command to /dev/null as it does not support the --if-exists option. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
27 lines
600 B
Text
27 lines
600 B
Text
config ovs ovs
|
|
option disabled 1
|
|
option ca '/etc/openvswitch/example_ca.crt'
|
|
option cert '/etc/openvswitch/example_cert.crt'
|
|
option key '/etc/openvswitch/example_key.crt'
|
|
|
|
config ovn_northd north
|
|
option disabled 1
|
|
|
|
config ovn_controller controller
|
|
option disabled 1
|
|
|
|
config ovs_bridge
|
|
option disabled 1
|
|
option name 'my-bridge'
|
|
option controller 'tcp:192.168.0.1'
|
|
option datapath_desc ''
|
|
option datapath_id ''
|
|
option fail_mode 'standalone'
|
|
|
|
config ovs_port
|
|
option disabled 1
|
|
option bridge 'my-bridge'
|
|
option port 'ovs-port1'
|
|
option ofport '1'
|
|
option tag '123'
|
|
option type 'internal'
|