FWaaS Layer2 Implementation

Registered by Sridar Kandaswamy on 2013-12-06

A common use case is for Firewalls to be inserted at Layer2. Vendors can provide support in their implementations but there is interest from deployers to have a reference implementation be supported as well.

The proposal can be implemented using the Service Insertion Framework with an L2 service context. The backend implementation can be an iptables driver on ML2.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
Sridar Kandaswamy
Direction:
Needs approval
Assignee:
None
Definition:
Obsolete
Series goal:
None
Implementation:
Unknown
Milestone target:
None
Completed by
Armando Migliaccio on 2015-11-13

Related branches

Sprints

Whiteboard

Nov-13-2015(armax): If someone is interested in pursuing it, this must be re-submitted according to guidelines defined in [1], especially in light of fwaas v2 proposal.

[1] http://docs.openstack.org/developer/neutron/policies/blueprints.html

-----------------

Is this blueprint in progress?, I see no document about it or you have change your ideaļ¼Ÿ

No change in idea. This is deferred to the J release due to:
1) Direction on neutron is to focus on stability so the FWaaS sub team has re-prioritzed features accordingly.
2) Dependencies are in progress.
We have started some discussions and as we wrap up on some of the priorities for the Icehouse - i will upload a design doc.

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

This blueprint contains Public information 
Everyone can see this information.