Update firewall.
Revert "Remove kvm devert, from now set cpu flags in ganeti."

This reverts commit 6ffe83c2957912e87cb51093f7cb4eb31c093f4b.

Conflicts:
	salt/ganeti/optimizations.sls
Move drbd module options to modprobe.d.
Minor sysctl.conf tweak.
Fight bufferbloat with fq_codel as default packet scheduler.
Revert "We hangle cpu flags in ganeti, no need for kvm bin divert."

This reverts commit 63cb2a61b8914bc2a796f3341a85e8b0281c1bb7.
Move all non *.sls files in ganeti module to files directory.
Tune lvm.conf to accept bcache device.
Remove unneeded drbd hosts directive.
Don't run out of instance users (30->70).
Generate modules file more nicely.
optimization.sls cosmetic fixes.
Use new pillar group parameter to set node cpu flags.

Currently ganeti doesn't support cpu flages based on which group or node
is VM currenty on. So we override KVM cpu parameter based on pillar
group value.
New pillar node parameter: hash-policy.