..
    Warning: Do not edit this file. It is automatically generated from the
    software project's code and your changes will be overwritten.

    The tool to generate this file lives in openstack-doc-tools repository.

    Please make any changes needed in the code, then run the
    autogenerate-config-doc tool from the openstack-doc-tools repository, or
    ask for help on the documentation mailing list, IRC channel or meeting.

.. _neutron-securitygroups:

.. list-table:: Description of security groups configuration options
   :header-rows: 1
   :class: config-ref-table

   * - Configuration option = Default value
     - Description
   * - **[SECURITYGROUP]**
     -
   * - ``enable_ipset`` = ``True``
     - (BoolOpt) Use ipset to speed-up the iptables based security groups. Enabling ipset support requires that ipset is installed on L2 agent node.
   * - ``enable_security_group`` = ``True``
     - (BoolOpt) Controls whether the neutron security group API is enabled in the server. It should be false when using no security groups or using the nova security group API.
   * - ``firewall_driver`` = ``None``
     - (StrOpt) Driver for security groups firewall in the L2 agent