Pike Series Release Notes¶
sysstatpackage was installed on all distributions, but it was only configured to run on Ubuntu and OpenSUSE. It would not run on CentOS due to bad SELinux contexts and file permissions on
/etc/cron.d/sysstat. This has been fixed and
sysstatnow runs properly on CentOS.
net.bridge.bridge-nf-call-*kernel parameters were set to
0in previous releases to improve performance and it was left up to neutron to adjust these parameters when security groups are applied. This could cause situations where bridge traffic was not sent through iptables and this rendered security groups ineffective. This could allow unexpected ingress and egress traffic within the cloud.
These kernel parameters are now set to
1on all hosts by the
openstack_hostsrole, which ensures that bridge traffic is always sent through iptables.
Deployers can set
openstack_host_nf_conntrack_maxto control the maximum size of the netfilter connection tracking table. The default of
262144should be increased if virtual machines will be handling large amounts of concurrent connections.