Skip to content

vmware: Encrypt vmotion if flavor requires it, or don't#508

Open
grandchild wants to merge 1 commit intostable/xena-m3from
i533984/vmotion_encryption
Open

vmware: Encrypt vmotion if flavor requires it, or don't#508
grandchild wants to merge 1 commit intostable/xena-m3from
i533984/vmotion_encryption

Conversation

@grandchild
Copy link

Vmotions should be encrypted, but not for really large RAM sizes because encryption impacts vmotion performance too much. So let the flavor define one of "required", "disabled" or "opportunistic". If not set, null/None defaults to "opportunistic".

Change-Id: Iba0fd2f2edc8fae210f6c4bab0218703e87ecfbc

@grandchild grandchild force-pushed the i533984/vmotion_encryption branch 3 times, most recently from d573031 to 1b6d1ac Compare September 11, 2024 13:33
@grandchild grandchild marked this pull request as ready for review September 11, 2024 13:34
@grandchild grandchild force-pushed the i533984/vmotion_encryption branch 2 times, most recently from 5ba9ba5 to 61f8012 Compare September 12, 2024 08:29
Vmotions should be encrypted, but not for really large RAM sizes
because encryption impacts vmotion performance too much. Let the
flavor define one of "required", "disabled" or "opportunistic".

The default in our VMware configuration is "opportunistic", which
means "use encryption for the vmotion if both source and target
support it", which should be all of our landscape. We default to
"required" explicitly now in Nova for every new & resized general-
purpose-flavored VM.

If the flavor sets an invalid value, the default will be used and a
warning logged.

Change-Id: Iba0fd2f2edc8fae210f6c4bab0218703e87ecfbc
@grandchild grandchild force-pushed the i533984/vmotion_encryption branch from 61f8012 to 200af10 Compare September 12, 2024 14:03
@grandchild
Copy link
Author

Rebased onto stable/xena-m3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant