FWaaS Layer2 Implementation
A common use case is for Firewalls to be inserted at Layer2. Vendors can provide support in their implementations but there is interest from deployers to have a reference implementation be supported as well.
The proposal can be implemented using the Service Insertion Framework with an L2 service context. The backend implementation can be an iptables driver on ML2.
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Sridar Kandaswamy
- Direction:
- Needs approval
- Assignee:
- None
- Definition:
- Obsolete
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
- Armando Migliaccio
Related branches
Related bugs
Sprints
Whiteboard
Nov-13-2015(armax): If someone is interested in pursuing it, this must be re-submitted according to guidelines defined in [1], especially in light of fwaas v2 proposal.
[1] http://
-----------------
Is this blueprint in progress?, I see no document about it or you have change your idea？
No change in idea. This is deferred to the J release due to:
1) Direction on neutron is to focus on stability so the FWaaS sub team has re-prioritzed features accordingly.
2) Dependencies are in progress.
We have started some discussions and as we wrap up on some of the priorities for the Icehouse - i will upload a design doc.
Work Items
Dependency tree
* Blueprints in grey have been implemented.
