neutron-fwaas/devstack
liushy 8de0c36cb9 Support l3 stateless firewall based on OVN
This patch implements a driver based on OVN, it creates port_group
for every l3 firewall_group and adds relating ports to port_group,
it also transforms firewall_rules to stateless acls.

Tests will been put in next patch.

NOTE: it depends on ML2/OVN.

Partially-Implements: blueprint support-l3-firewall-for-ovn-driver
Related-Bug: #1971958
Change-Id: If153645b3da198ef1746e98af80ac6f0a0b41bf9
2024-08-16 10:48:35 +08:00
..
lib revive neutron-fwaas project 2022-03-01 01:01:47 +00:00
plugin.sh Support l3 stateless firewall based on OVN 2024-08-16 10:48:35 +08:00
README.rst revive neutron-fwaas project 2022-03-01 01:01:47 +00:00
settings Support l3 stateless firewall based on OVN 2024-08-16 10:48:35 +08:00

neutron-fwaas in DevStack

This is setup as a DevStack plugin. For more information on DevStack plugins, see the DevStack Plugins documentation.

Please note that the old 'q-fwaas' keyword still exists, You can specify enable_service q-fwaas or enable_service q-fwaas-v2 in local.conf

How to run FWaaS V2 in DevStack

Add the following to the localrc section of your local.conf to configure FWaaS v2.

[[local|localrc]]
enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas

To check a specific patchset that is currently under development, use a form like the below example, which is checking out change 214350 patch set 14 for testing.

[[local|localrc]]
enable_plugin neutron-fwaas https://review.openstack.org/p/openstack/neutron-fwaas refs/changes/50/214350/14