horizon/releasenotes/notes/security-group-rule-wildcard-protocol-and-port-support-7dd6f5acfaba55ba.yaml
Yves-Gwenael Bourhis 87337ff255 Allow any port or protocol in security group rules
Neutron allows setting port or protocol wildcard by not specifying any value
for them.

Example, these are allowed by neutron:

    neutron security-group-rule-create --direction egress <sgid>
    neutron security-group-rule-create --direction egress --protocol tcp <sgid>

Specifying '-1' for IP protocol means a wildcard IP protocol.
validate_ip_protocol is updated accordingly.

'All ports' choice is added to 'Open Port' field.

Change-Id: I4a7262eda89e3206c743fee14c78aa6b49308ce6
Closes-Bug: 1669467
2017-03-29 04:53:02 +00:00

10 lines
433 B
YAML

---
features:
- |
Securtiy group "Add rule" form now allows to specify 'any' IP protocol
and 'any' port number (for TCP and UDP protocols). This feature is
available when neutron is used as a networking back-end.
You can specify 'any' IP protocol for 'Other Protocol' and ``-1`` means
'any' IP protocol. You can also see ``All ports`` choice in 'Open Port'
field in case of TCP or UDP protocol is selected.