diff --git a/etc/nova/rootwrap.d/compute.filters b/etc/nova/rootwrap.d/compute.filters
index 07f18eab3bcb..5a486a011fa5 100644
--- a/etc/nova/rootwrap.d/compute.filters
+++ b/etc/nova/rootwrap.d/compute.filters
@@ -86,6 +86,9 @@ tunctl: CommandFilter, tunctl, root
 # nova/network/linux_net.py: 'ovs-vsctl', ....
 ovs-vsctl: CommandFilter, ovs-vsctl, root
 
+# nova/network/linux_net.py: 'ivs-ctl', ....
+ivs-ctl: CommandFilter, ivs-ctl, root
+
 # nova/virt/libvirt/vif.py: 'vrouter-port-control', ...
 vrouter-port-control: CommandFilter, vrouter-port-control, root
 
diff --git a/releasenotes/notes/add-ivs-filter-to-compute-093734c1c5348e99.yaml b/releasenotes/notes/add-ivs-filter-to-compute-093734c1c5348e99.yaml
new file mode 100644
index 000000000000..bd2197b92763
--- /dev/null
+++ b/releasenotes/notes/add-ivs-filter-to-compute-093734c1c5348e99.yaml
@@ -0,0 +1,5 @@
+---
+upgrade:
+  - The ivs-ctl command has been added to the rootwrap filters in
+    compute.filters. Deployments needing support for BigSwitch no longer need
+    to add the filters manually nor include network.filters at installation.