listen_tls = 1
listen_tcp = 0
tls_port = "16514"
key_file = "/etc/pki/libvirt/private/serverkey.pem"
cert_file = "/etc/pki/libvirt/servercert.pem"
ca_file = "/etc/pki/CA/cacert.pem"
auth_tls = "sasl"
log_level = 3
log_outputs = "3:file:/var/log/kolla/libvirt/libvirtd.log"
listen_addr = "192.0.2.1"

# Connection processing limits. libvirt's defaults (max_workers=20,
# max_client_requests=5) assume a multi-tenant host with many mutually
# distrustful clients. Under Kolla, nova-compute is effectively the sole
# privileged client, so the per-client cap of 5 becomes the binding
# constraint: concurrent builds plus the resource-tracker periodic exceed
# five in-flight RPCs and starve keepalive responses, causing libvirtd to
# drop the connection after keepalive_interval (5s) x keepalive_count (5).
max_workers = 50
max_client_requests = 20