diff --git a/doc/src/docbkx/openstack-security/ch032_networking-best-practices.xml b/doc/src/docbkx/openstack-security/ch032_networking-best-practices.xml index 4b0a49e764..dcf117edb6 100644 --- a/doc/src/docbkx/openstack-security/ch032_networking-best-practices.xml +++ b/doc/src/docbkx/openstack-security/ch032_networking-best-practices.xml @@ -73,16 +73,16 @@
Networking Services Limitations - There a few current known limitations of OpenStack Networking: + OpenStack Networking has the following known limitations: - Overlapping IP addressesLinux network namespaces are required on nodes running neutron-l3-agent or neutron-dhcp-agent if overlapping IP's are in use. In order to support overlapping IP addresses, the OpenStack Networking DHCP and L3 agents use Linux network namespaces by default. If the host does not support namespaces then the neutron-l3-agent and neutron-dhcp-agent should be run on different hosts. - A further limitation of the L3 Agent is the support a single logical router without namespaces. + Overlapping IP addresses — If nodes that run either neutron-l3-agent or neutron-dhcp-agent use overlapping IP addresses, those nodes must use Linux network namespaces. By default, the DHCP and L3 agents use Linux network namespaces. However, if the host does not support these namespaces, run the DHCP and L3 agents on different hosts. + If network namespace support is not present, a further limitation of the L3 Agent is that only a single logical router is supported. - Multi-Host DHCP-agentOpenStack Networking now supports running multiple l3-agent and dhcp-agents with load being split across those agents, but the tight coupling of that scheduling with the location of the VM is not supported in Grizzly. The Havana release is expected to include an exact replacement for the --multi_host flag in nova-network. + Multi-Host DHCP-agent — OpenStack Networking supports multiple l3-agent and dhcp-agents with load balancing. However, tight coupling of the location of the virtual machine is not supported. - No IPv6 Support for L3 agentsThe neutron-l3-agent, used by many plugins to implement L3 forwarding, supports only IPv4 forwarding. + No IPv6 Support for L3 agents — The neutron-l3-agent, used by many plugins to implement L3 forwarding, supports only IPv4 forwarding.