8de0c36cb9
This patch implements a driver based on OVN, it creates port_group for every l3 firewall_group and adds relating ports to port_group, it also transforms firewall_rules to stateless acls. Tests will been put in next patch. NOTE: it depends on ML2/OVN. Partially-Implements: blueprint support-l3-firewall-for-ovn-driver Related-Bug: #1971958 Change-Id: If153645b3da198ef1746e98af80ac6f0a0b41bf9 |
||
---|---|---|
.. | ||
lib | ||
plugin.sh | ||
README.rst | ||
settings |
neutron-fwaas in DevStack
This is setup as a DevStack plugin. For more information on DevStack plugins, see the DevStack Plugins documentation.
Please note that the old 'q-fwaas' keyword still exists, You can specify enable_service q-fwaas or enable_service q-fwaas-v2 in local.conf
How to run FWaaS V2 in DevStack
Add the following to the localrc section of your local.conf to configure FWaaS v2.
[[local|localrc]]
enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas
To check a specific patchset that is currently under development, use a form like the below example, which is checking out change 214350 patch set 14 for testing.
[[local|localrc]]
enable_plugin neutron-fwaas https://review.openstack.org/p/openstack/neutron-fwaas refs/changes/50/214350/14