23
Parameter
Description
•
ANY
—Traffic to the external network is directly forwarded by
the gateway to the external network.
•
OFF
—Traffic to the external network is forwarded by the
gateway to the firewall and then to the external network.
•
SUFFIX
—Traffic that matches the vRouter name suffix is
forwarded by the gateway to the firewall and then to the
external network.
directly_external_suffix
vRouter name suffix (DMZ for example). This parameter is
available only when you set the value of the
directly_external
parameter to
SUFFIX
.
When you change the vRouter name, make sure you understand
the impact on this parameter.
Only the Pike, Queens, and Rocky plug-ins support this
parameter.
sec_agent_enable
Whether to enable the h3c-sec-agent process. The default value
is
True
.
This parameter is used and takes effect only for security plug-in
upgrade.
Value change of this parameter does not take effect immediately.
After you set the value to
True
, you must install the security
plug-in and execute the
h3c-secplugin controller
install
command to enable the process.
lb_resource_mode
Resource pool mode of LB service resources.
•
SP
—All gateways share the same LB resource pool.
•
MP
—Each gateway uses an LB resource pool.
The default value is
SP
.
enable_lb_xff
Whether to enable XFF transparent transmission for LB listeners.
•
True
—Enable.
•
False
—Disable.
When the value is
True
and the listener protocol is
HTTP
or
TERMINATED_HTTPS
, a newly created listener is enabled with
XFF transparent transmission by default, and the client's IP
address is transparently transmitted to the server encapsulated in
the
X-Forward-For
field of the HTTP header.
Only the Pike plug-ins support this parameter.
Upgrading the SeerEngine-DC Neutron security plug-in
To upgrade the SeerEngine-DC Neutron security plug-in, first remove the old version and then install
the new version. For more information, see "Installing the security plug-in on the controller node."
CAUTION:
Service might be interrupted during the upgrade. Before performing an upgrade, be sure you fully
understand its impact on services.
IMPORTANT:
The default parameter settings vary depending on the version of SeerEngine-DC Neutron security
plug-in. Modify the default parameter settings for SeerEngine-DC Neutron security plug-in to ensure
that the plug-ins have the same parameter settings before and after the upgrade.
