it doesn't matter where it is, it just needs to be there. see neutron's installation guide, which says these settings are required:

```
net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0

```