Firewall as a Service (FWaaS) extension to support DSCP filters

Registered by Sridar Kandaswamy

The Firewall as a Service (FWaaS) set of BP's aims at providing a reference Firewall implementation for the OpenStack community. The implementation leverages the L3 agent and uses IP tables for the backend. The intent is to provide a perimeter firewall in the Havana timeframe.

There is interest to look at filters beyond the basic support (5 tuple) that is being provided in the FWaaS reference implementation. There is an immediate interest to support filters on the DSCP marking on IP packets.

With this BP, we propose to add this capability for DSCP based filtering as an extension to FWaaS.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
Sridar Kandaswamy
Direction:
Needs approval
Assignee:
None
Definition:
Obsolete
Series goal:
None
Implementation:
Unknown
Milestone target:
None
Completed by
Armando Migliaccio

Related branches

Sprints

Whiteboard

Nov-13-2015(armax): If someone is interested in pursuing it, this must be re-submitted according to guidelines defined in [1], especially in light of fwaas v2 api proposal.

[1] http://docs.openstack.org/developer/neutron/policies/blueprints.html

-----------------

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.