Neutron FWaaS - Introduce Service Insertion

Registered by Sumit Naiksatam

The current FWaaS API does not have any provision to provide an insertion context. Hence the firewall is inserted using default semantics that insert the firewall in all the routers that a tenant owns.

The insertion operations are being separately addressed in the following blueprint:
https://blueprints.launchpad.net/neutron/+spec/neutron-services-insertion-chaining-steering

We will leverage the insertion context defined in the above proposal to perform the firewall insertion. In the case of the reference implementation, this will be on a particular router.

Blueprint information

Status:
Complete
Approver:
Mark McClain
Priority:
Low
Drafter:
Sumit Naiksatam
Direction:
Approved
Assignee:
Rajesh Mohan
Definition:
Obsolete
Series goal:
None
Implementation:
Needs Code Review
Milestone target:
milestone icon next
Started by
Thierry Carrez
Completed by
Armando Migliaccio

Related branches

Sprints

Whiteboard

Nov-13-2015(armax): If someone is interested in pursuing it, this must be re-submitted according to guidelines defined in [1], especially in light of fwaas v2 api proposal.

[1] http://docs.openstack.org/developer/neutron/policies/blueprints.html

-----------------

6-Mar (markmcclain): Deferring to Juno

Gerrit topic: https://review.openstack.org/#q,topic:bp/fwaas-service-insertion,n,z

Addressed by: https://review.openstack.org/62599
    Implements: blueprint fwaas-service-insertion Implements: blueprint neutron-services-insertion-chaining-steering

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.