openstack/neutron-lib
Code Issues Proposed changes

Update status of VPNaaS in neutron

Browse Source 
Neutron-vpnaas is intending to bring back into the stadium.

Co-Authored-By: Hunt Xu <mhuntxu@gmail.com>

Change-Id: I447bbf19a64bbab907beee20ae231b751df2dd6b
This commit is contained in:
Cao Xuan Hoang 2017-03-20 09:34:21 +07:00
parent 87b4a0eb30
commit 577744a27a
7 changed files with 145 additions and 116 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
api-ref/source/v2/parameters.yaml
View File

@ -33,7 +33,7 @@ bgpvpn-router_association_id-path:
type: string type: string
connection_id-path: connection_id-path:
description: | description: |
The ID of the IPSec site-to-site connection. The ID of the IPsec site-to-site connection.
in: path in: path
required: false required: false
type: string type: string
@ -47,7 +47,7 @@ endpoint_group_id-path:
description: | description: |
The ID of the VPN endpoint group. The ID of the VPN endpoint group.
in: path in: path
required: false required: true
type: string type: string
extensions-alias-path: extensions-alias-path:
description: | description: |
@ -129,7 +129,7 @@ ikepolicy_id-path:
type: string type: string
ipsecpolicy_id-path: ipsecpolicy_id-path:
description: | description: |
The ID of the IPSec policy. The ID of the IPsec policy.
in: path in: path
required: false required: false
type: string type: string
@ -425,7 +425,7 @@ admin_state_up_13:
type: boolean type: boolean
admin_state_up_14: admin_state_up_14:
description: | description: |
The administrative state of the IPSec connection, The administrative state of the IPsec connection,
which is up (``true``) or down (``false``). If down, the which is up (``true``) or down (``false``). If down, the
connection does not forward packets. connection does not forward packets.
in: body in: body
@ -506,7 +506,7 @@ admin_state_up_25:
type: boolean type: boolean
admin_state_up_26: admin_state_up_26:
description: | description: |
The administrative state of the IPSec connection, The administrative state of the IPsec connection,
which is up (``true``) or down (``false``). If down, the which is up (``true``) or down (``false``). If down, the
connection does not forward packets. connection does not forward packets.
in: body in: body
@ -1093,7 +1093,7 @@ configurations:
type: object type: object
connection_id-body-response: connection_id-body-response:
description: | description: |
The ID of the IPSec site-to-site connection. The ID of the IPsec site-to-site connection.
in: body in: body
required: false required: false
type: string type: string
@ -1382,7 +1382,7 @@ description_22:
type: string type: string
description_23: description_23:
description: | description: |
A human-readable description for the IPSec A human-readable description for the IPsec
connection. connection.
in: body in: body
required: true required: true
@ -1475,13 +1475,13 @@ description_4:
type: string type: string
description_5: description_5:
description: | description: |
A human-readable description for the IPSec policy. A human-readable description for the IPsec policy.
in: body in: body
required: true required: true
type: string type: string
description_6: description_6:
description: | description: |
A human-readable description for the IPSec A human-readable description for the IPsec
connection. connection.
in: body in: body
required: false required: false
@ -3107,7 +3107,7 @@ ipsec_site_connection-action:
type: string type: string
ipsec_site_connection-status: ipsec_site_connection-status:
description: | description: |
Indicates whether the IPSec connection is Indicates whether the IPsec connection is
currently operational. Values are ``ACTIVE``, ``DOWN``, ``BUILD``, currently operational. Values are ``ACTIVE``, ``DOWN``, ``BUILD``,
``ERROR``, ``PENDING_CREATE``, ``PENDING_UPDATE``, or ``ERROR``, ``PENDING_CREATE``, ``PENDING_UPDATE``, or
``PENDING_DELETE``. ``PENDING_DELETE``.
@ -3136,13 +3136,13 @@ ipsecpolicy:
type: object type: object
ipsecpolicy_id-body-request: ipsecpolicy_id-body-request:
description: | description: |
The ID of the IPSec policy. The ID of the IPsec policy.
in: body in: body
required: false required: false
type: string type: string
ipsecpolicy_id-body-response: ipsecpolicy_id-body-response:
description: | description: |
The ID of the IPSec policy. The ID of the IPsec policy.
in: body in: body
required: true required: true
type: string type: string
@ -3778,7 +3778,7 @@ name_24:
type: string type: string
name_25: name_25:
description: | description: |
Human-readable name for the IPSec connection. Human-readable name for the IPsec connection.
Does not have to be unique. Does not have to be unique.
in: body in: body
required: true required: true
@ -3916,14 +3916,14 @@ name_43:
type: string type: string
name_5: name_5:
description: | description: |
A human-readable name for the IPSec policy. Does A human-readable name for the IPsec policy. Does
not have to be unique. not have to be unique.
in: body in: body
required: true required: true
type: string type: string
name_6: name_6:
description: | description: |
Human-readable name for the IPSec connection. Human-readable name for the IPsec connection.
Does not have to be unique. Does not have to be unique.
in: body in: body
required: false required: false
@ -6081,14 +6081,14 @@ tenant_id_6:
type: string type: string
tenant_id_7: tenant_id_7:
description: | description: |
Owner of the IPSec policy. Only administrative Owner of the IPsec policy. Only administrative
users can specify a tenant UUID other than their own. users can specify a tenant UUID other than their own.
in: body in: body
required: true required: true
type: string type: string
tenant_id_8: tenant_id_8:
description: | description: |
Owner of the IPSec connection. Only Owner of the IPsec connection. Only
administrative users can specify a tenant UUID other than their administrative users can specify a tenant UUID other than their
own. own.
in: body in: body
@ -6162,7 +6162,8 @@ type_2:
description: | description: |
The type of the endpoints in the group. A valid The type of the endpoints in the group. A valid
value is ``subnet``, ``cidr``, ``network``, ``router``, or value is ``subnet``, ``cidr``, ``network``, ``router``, or
``vlan``. ``vlan``. Only ``subnet`` and ``cidr`` are supported
at this moment.
in: body in: body
required: true required: true
type: string type: string
@ -6442,7 +6443,7 @@ vpnservice:
type: object type: object
vpnservice-status: vpnservice-status:
description: | description: |
Indicates whether IPSec VPN service is currently Indicates whether IPsec VPN service is currently
operational. Values are ``ACTIVE``, ``DOWN``, ``BUILD``, ``ERROR``, operational. Values are ``ACTIVE``, ``DOWN``, ``BUILD``, ``ERROR``,
``PENDING_CREATE``, ``PENDING_UPDATE``, or ``PENDING_DELETE``. ``PENDING_CREATE``, ``PENDING_UPDATE``, or ``PENDING_DELETE``.
in: body in: body

3
api-ref/source/v2/samples/vpn/vpnservice-create-request.json
View File

@ -3,6 +3,7 @@
"subnet_id": null, "subnet_id": null,
"router_id": "66e3b16c-8ce5-40fb-bb49-ab6d8dc3f2aa", "router_id": "66e3b16c-8ce5-40fb-bb49-ab6d8dc3f2aa",
"name": "myservice", "name": "myservice",
"admin_state_up": true "admin_state_up": true,
"flavor_id": null
} }
} }

3
api-ref/source/v2/samples/vpn/vpnservice-create-response.json
View File

@ -10,6 +10,7 @@
"tenant_id": "10039663455a446d8ba2cbb058b0f578", "tenant_id": "10039663455a446d8ba2cbb058b0f578",
"external_v4_ip": "172.32.1.11", "external_v4_ip": "172.32.1.11",
"id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828", "id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828",
"description": "" "description": "",
"flavor_id": null
} }
} }

3
api-ref/source/v2/samples/vpn/vpnservice-show-response.json
View File

@ -10,6 +10,7 @@
"tenant_id": "10039663455a446d8ba2cbb058b0f578", "tenant_id": "10039663455a446d8ba2cbb058b0f578",
"external_v4_ip": "172.32.1.11", "external_v4_ip": "172.32.1.11",
"id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828", "id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828",
"description": "" "description": "",
"flavor_id": null
} }
} }

3
api-ref/source/v2/samples/vpn/vpnservice-update-response.json
View File

@ -8,6 +8,7 @@
"project_id": "26de9cd6cae94c8cb9f79d660d628e1f", "project_id": "26de9cd6cae94c8cb9f79d660d628e1f",
"tenant_id": "26de9cd6cae94c8cb9f79d660d628e1f", "tenant_id": "26de9cd6cae94c8cb9f79d660d628e1f",
"id": "41bfef97-af4e-4f6b-a5d3-4678859d2485", "id": "41bfef97-af4e-4f6b-a5d3-4678859d2485",
"description": "Updated description" "description": "Updated description",
"flavor_id": null
} }
} }

3
api-ref/source/v2/samples/vpn/vpnservices-list-response.json
View File

@ -11,7 +11,8 @@
"tenant_id": "10039663455a446d8ba2cbb058b0f578", "tenant_id": "10039663455a446d8ba2cbb058b0f578",
"external_v4_ip": "172.32.1.11", "external_v4_ip": "172.32.1.11",
"id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828", "id": "5c561d9d-eaea-45f6-ae3e-08d1a7080828",
"description": "" "description": "",
"flavor_id": null
} }
] ]
} }

207
api-ref/source/v2/vpnaas.inc
View File

@ -1,8 +1,8 @@
.. -*- rst -*- .. -*- rst -*-
=================================================================================================================================================================================================== ==================================================================================================
VPNaaS 2.0 (`UNMAINTAINED <http://lists.openstack.org/pipermail/openstack-dev/2016-November/107384.html>`_) (vpn, vpnservices, ikepolicies, ipsecpolicies, endpoint-groups, ipsec-site-connections) VPNaaS 2.0 (vpn, vpnservices, ikepolicies, ipsecpolicies, endpoint-groups, ipsec-site-connections)
=================================================================================================================================================================================================== ==================================================================================================
The Virtual-Private-Network-as-a-Service (VPNaaS) extension enables The Virtual-Private-Network-as-a-Service (VPNaaS) extension enables
OpenStack projects to extend private networks across the public OpenStack projects to extend private networks across the public
@ -17,7 +17,7 @@ This initial implementation of the VPNaaS extension provides:
- IKEv1 policy support with 3des, aes-128, aes-256, or aes-192 - IKEv1 policy support with 3des, aes-128, aes-256, or aes-192
encryption. encryption.
- IPSec policy support with 3des, aes-128, aes-192, or aes-256 - IPsec policy support with 3des, aes-128, aes-192, or aes-256
encryption, sha1 authentication, ESP, AH, or AH-ESP transform encryption, sha1 authentication, ESP, AH, or AH-ESP transform
protocol, and tunnel or transport mode encapsulation. protocol, and tunnel or transport mode encapsulation.
@ -41,9 +41,20 @@ This extension introduces these resources:
connection, including the peer CIDRs, MTU, authentication mode, connection, including the peer CIDRs, MTU, authentication mode,
peer address, DPD settings, and status. peer address, DPD settings, and status.
- ``endpoint-groups``. Defines one or more endpoints of a specific type, VPN Endpoint Groups
and can be used to specify both local and peer endpoints for ===================
IPSec Connections.
The ``endpoint-groups`` extension adds support for defining one or more
endpoints of a specific type, and can be used to specify both local
and peer endpoints for IPsec connections.
VPN Flavors
===========
The ``vpn-flavors`` extension adds the ``flavor_id`` attribute
to ``vpnservices`` resources. During vpnservice creation, if a ``flavor_id``
is passed, it is used to find the provider for the driver which would
handle the newly created vpnservice.
List IKE policies List IKE policies
================= =================
@ -75,8 +86,8 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- ikepolicies: ikepolicies - ikepolicies: ikepolicies
- name: name - name: name-request
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -116,8 +127,8 @@ Request
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- ikepolicy: ikepolicy - ikepolicy: ikepolicy
- name: name - name: name-request
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -142,8 +153,8 @@ Response Parameters
- ikepolicies: ikepolicies - ikepolicies: ikepolicies
- ikepolicy: ikepolicy - ikepolicy: ikepolicy
- name: name - name: name-request
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -187,8 +198,8 @@ Response Parameters
- ikepolicies: ikepolicies - ikepolicies: ikepolicies
- ikepolicy: ikepolicy - ikepolicy: ikepolicy
- name: name - name: name-request
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -225,9 +236,9 @@ Request
- ikepolicy_id: ikepolicy_id-path - ikepolicy_id: ikepolicy_id-path
- ikepolicy: ikepolicy - ikepolicy: ikepolicy
- description: description - description: description-request
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
- name: name - name: name-request
- encryption_algorithm: encryption_algorithm - encryption_algorithm: encryption_algorithm
- pfs: pfs - pfs: pfs
- value: value - value: value
@ -249,11 +260,11 @@ Response Parameters
- ikepolicies: ikepolicies - ikepolicies: ikepolicies
- ikepolicy: ikepolicy - ikepolicy: ikepolicy
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
- name: name - name: name-request
- encryption_algorithm: encryption_algorithm - encryption_algorithm: encryption_algorithm
- pfs: pfs - pfs: pfs
- value: value - value: value
@ -292,12 +303,12 @@ Response
There is no body content for the response of a successful DELETE request. There is no body content for the response of a successful DELETE request.
List IPSec policies List IPsec policies
=================== ===================
.. rest_method:: GET /v2.0/vpn/ipsecpolicies .. rest_method:: GET /v2.0/vpn/ipsecpolicies
Lists all IPSec policies. Lists all IPsec policies.
Use the ``fields`` query parameter to control which fields are Use the ``fields`` query parameter to control which fields are
returned in the response body. Additionally, you can filter results returned in the response body. Additionally, you can filter results
@ -322,7 +333,7 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- ipsecpolicies: ipsecpolicies - ipsecpolicies: ipsecpolicies
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -334,7 +345,7 @@ Response Parameters
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- id: ipsecpolicy_id-body-response - id: ipsecpolicy_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -342,12 +353,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsecpolicies-list-response.json .. literalinclude:: samples/vpn/ipsecpolicies-list-response.json
:language: javascript :language: javascript
Create IPSec policy Create IPsec policy
=================== ===================
.. rest_method:: POST /v2.0/vpn/ipsecpolicies .. rest_method:: POST /v2.0/vpn/ipsecpolicies
Creates an IP security (IPSec) policy. Creates an IP security (IPsec) policy.
The IPsec policy specifies the authentication and encryption The IPsec policy specifies the authentication and encryption
algorithms and encapsulation mode to use for the established VPN algorithms and encapsulation mode to use for the established VPN
@ -363,7 +374,7 @@ Request
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- ipsecpolicy: ipsecpolicy - ipsecpolicy: ipsecpolicy
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -374,7 +385,7 @@ Request
- transform_protocol: transform_protocol - transform_protocol: transform_protocol
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- name: name - name: name-request
Request Example Request Example
--------------- ---------------
@ -389,7 +400,7 @@ Response Parameters
- ipsecpolicies: ipsecpolicies - ipsecpolicies: ipsecpolicies
- ipsecpolicy: ipsecpolicy - ipsecpolicy: ipsecpolicy
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -401,7 +412,7 @@ Response Parameters
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- id: ipsecpolicy_id-body-response - id: ipsecpolicy_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -409,12 +420,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsecpolicy-create-response.json .. literalinclude:: samples/vpn/ipsecpolicy-create-response.json
:language: javascript :language: javascript
Show IPSec policy Show IPsec policy
================= =================
.. rest_method:: GET /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id} .. rest_method:: GET /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id}
Shows details for an IPSec policy. Shows details for an IPsec policy.
Normal response codes: 200 Normal response codes: 200
@ -434,7 +445,7 @@ Response Parameters
- ipsecpolicies: ipsecpolicies - ipsecpolicies: ipsecpolicies
- ipsecpolicy: ipsecpolicy - ipsecpolicy: ipsecpolicy
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -446,7 +457,7 @@ Response Parameters
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- id: ipsecpolicy_id-body-response - id: ipsecpolicy_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -454,12 +465,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsecpolicy-show-response.json .. literalinclude:: samples/vpn/ipsecpolicy-show-response.json
:language: javascript :language: javascript
Update IPSec policy Update IPsec policy
=================== ===================
.. rest_method:: PUT /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id} .. rest_method:: PUT /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id}
Updates policy settings in an IPSec policy. Updates policy settings in an IPsec policy.
Normal response codes: 200 Normal response codes: 200
@ -472,7 +483,7 @@ Request
- ipsecpolicy_id: ipsecpolicy_id-path - ipsecpolicy_id: ipsecpolicy_id-path
- ipsecpolicy: ipsecpolicy - ipsecpolicy: ipsecpolicy
- description: description - description: description-request
- transform_protocol: transform_protocol - transform_protocol: transform_protocol
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
- encapsulation_mode: encapsulation_mode - encapsulation_mode: encapsulation_mode
@ -481,7 +492,7 @@ Request
- value: value - value: value
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- name: name - name: name-request
Request Example Request Example
--------------- ---------------
@ -496,7 +507,7 @@ Response Parameters
- ipsecpolicies: ipsecpolicies - ipsecpolicies: ipsecpolicies
- ipsecpolicy: ipsecpolicy - ipsecpolicy: ipsecpolicy
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- auth_algorithm: auth_algorithm - auth_algorithm: auth_algorithm
@ -508,7 +519,7 @@ Response Parameters
- units: units - units: units
- lifetime: lifetime - lifetime: lifetime
- id: ipsecpolicy_id-body-response - id: ipsecpolicy_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -516,12 +527,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsecpolicy-update-response.json .. literalinclude:: samples/vpn/ipsecpolicy-update-response.json
:language: javascript :language: javascript
Remove IPSec policy Remove IPsec policy
=================== ===================
.. rest_method:: DELETE /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id} .. rest_method:: DELETE /v2.0/vpn/ipsecpolicies/{ipsecpolicy_id}
Removes an IPSec policy. Removes an IPsec policy.
Normal response codes: 204 Normal response codes: 204
@ -539,12 +550,12 @@ Response
There is no body content for the response of a successful DELETE request. There is no body content for the response of a successful DELETE request.
List IPSec connections List IPsec connections
====================== ======================
.. rest_method:: GET /v2.0/vpn/ipsec-site-connections .. rest_method:: GET /v2.0/vpn/ipsec-site-connections
Lists all IPSec connections. Lists all IPsec connections.
Use the ``fields`` query parameter to control which fields are Use the ``fields`` query parameter to control which fields are
returned in the response body. For information, see `Filtering and returned in the response body. For information, see `Filtering and
@ -579,10 +590,10 @@ Response Parameters
- peer_id: peer_id - peer_id: peer_id
- status: ipsec_site_connection-status - status: ipsec_site_connection-status
- psk: psk - psk: psk
- description: description - description: description-request
- initiator: initiator - initiator: initiator
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
@ -600,12 +611,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsec-site-connections-list-response.json .. literalinclude:: samples/vpn/ipsec-site-connections-list-response.json
:language: javascript :language: javascript
Create IPSec connection Create IPsec connection
======================= =======================
.. rest_method:: POST /v2.0/vpn/ipsec-site-connections .. rest_method:: POST /v2.0/vpn/ipsec-site-connections
Creates a site-to-site IPSec connection for a service. Creates a site-to-site IPsec connection for a service.
Normal response codes: 201 Normal response codes: 201
@ -626,10 +637,10 @@ Request
- ipsecpolicy_id: ipsecpolicy_id-body-request - ipsecpolicy_id: ipsecpolicy_id-body-request
- peer_id: peer_id - peer_id: peer_id
- psk: psk - psk: psk
- description: description - description: description-request
- initiator: initiator - initiator: initiator
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
@ -664,10 +675,10 @@ Response Parameters
- peer_id: peer_id - peer_id: peer_id
- status: ipsec_site_connection-status - status: ipsec_site_connection-status
- psk: psk - psk: psk
- description: description - description: description-request
- initiator: initiator - initiator: initiator
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
@ -685,12 +696,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsec-site-connection-create-response.json .. literalinclude:: samples/vpn/ipsec-site-connection-create-response.json
:language: javascript :language: javascript
Show IPSec connection Show IPsec connection
===================== =====================
.. rest_method:: GET /v2.0/vpn/ipsec-site-connections/{connection_id} .. rest_method:: GET /v2.0/vpn/ipsec-site-connections/{connection_id}
Shows details for an IPSec connection. Shows details for an IPsec connection.
Normal response codes: 200 Normal response codes: 200
@ -720,10 +731,10 @@ Response Parameters
- peer_id: peer_id - peer_id: peer_id
- status: ipsec_site_connection-status - status: ipsec_site_connection-status
- psk: psk - psk: psk
- description: description - description: description-request
- initiator: initiator - initiator: initiator
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
@ -741,12 +752,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsec-site-connection-show-response.json .. literalinclude:: samples/vpn/ipsec-site-connection-show-response.json
:language: javascript :language: javascript
Update IPSec connection Update IPsec connection
======================= =======================
.. rest_method:: PUT /v2.0/vpn/ipsec-site-connections/{connection_id} .. rest_method:: PUT /v2.0/vpn/ipsec-site-connections/{connection_id}
Updates connection settings for an IPSec connection. Updates connection settings for an IPsec connection.
Normal response codes: 200 Normal response codes: 200
@ -761,7 +772,7 @@ Request
- ipsec_site_connection: ipsec_site_connection - ipsec_site_connection: ipsec_site_connection
- psk: psk - psk: psk
- initiator: initiator - initiator: initiator
- description: description - description: description-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- interval: interval - interval: interval
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
@ -773,7 +784,7 @@ Request
- action: ipsec_site_connection-action - action: ipsec_site_connection-action
- peer_address: peer_address - peer_address: peer_address
- peer_id: peer_id - peer_id: peer_id
- name: name - name: name-request
- local_id: local_id - local_id: local_id
Request Example Request Example
@ -799,10 +810,10 @@ Response Parameters
- peer_id: peer_id - peer_id: peer_id
- status: ipsec_site_connection-status - status: ipsec_site_connection-status
- psk: psk - psk: psk
- description: description - description: description-request
- initiator: initiator - initiator: initiator
- peer_cidrs: peer_cidrs - peer_cidrs: peer_cidrs
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
@ -820,12 +831,12 @@ Response Example
.. literalinclude:: samples/vpn/ipsec-site-connection-update-response.json .. literalinclude:: samples/vpn/ipsec-site-connection-update-response.json
:language: javascript :language: javascript
Remove IPSec connection Remove IPsec connection
======================= =======================
.. rest_method:: DELETE /v2.0/vpn/ipsec-site-connections/{connection_id} .. rest_method:: DELETE /v2.0/vpn/ipsec-site-connections/{connection_id}
Removes an IPSec connection. Removes an IPsec connection.
Normal response codes: 204 Normal response codes: 204
@ -873,11 +884,11 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- endpoints: endpoints - endpoints: endpoints
- name: name - name: name-request
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- type: type - type: type_2
- id: endpoint_group_id-body-response - id: endpoint_group_id-body-response
Response Example Response Example
@ -908,9 +919,9 @@ Request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- endpoints: endpoints - endpoints: endpoints
- type: type - type: type_2
- description: description - description: description-request
- name: name - name: name-request
Request Example Request Example
--------------- ---------------
@ -924,12 +935,12 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- endpoints: endpoints - endpoints: endpoints
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- type: type - type: type_2
- id: endpoint_group_id-body-response - id: endpoint_group_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -961,12 +972,12 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- endpoints: endpoints - endpoints: endpoints
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- type: type - type: type_2
- id: endpoint_group_id-body-response - id: endpoint_group_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -990,8 +1001,8 @@ Request
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- description: description - description: description-request
- name: name - name: name-request
- endpoint_group_id: endpoint_group_id-path - endpoint_group_id: endpoint_group_id-path
Request Example Request Example
@ -1006,12 +1017,12 @@ Response Parameters
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- endpoints: endpoints - endpoints: endpoints
- description: description - description: description-request
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- type: type - type: type_2
- id: endpoint_group_id-body-response - id: endpoint_group_id-body-response
- name: name - name: name-request
Response Example Response Example
---------------- ----------------
@ -1076,7 +1087,7 @@ Response Parameters
- vpnservices: vpnservices - vpnservices: vpnservices
- router_id: router_id - router_id: router_id
- status: vpnservice-status - status: vpnservice-status
- name: name - name: name-request
- external_v6_ip: external_v6_ip - external_v6_ip: external_v6_ip
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- subnet_id: subnet_id - subnet_id: subnet_id
@ -1084,7 +1095,8 @@ Response Parameters
- project_id: project_id - project_id: project_id
- external_v4_ip: external_v4_ip - external_v4_ip: external_v4_ip
- id: vpnservice_id-body-response - id: vpnservice_id-body-response
- description: description - description: description-request
- flavor_id: flavor-id-response
Response Example Response Example
---------------- ----------------
@ -1102,6 +1114,13 @@ Creates a VPN service.
The service is associated with a router. After you create the The service is associated with a router. After you create the
service, it can contain multiple VPN connections. service, it can contain multiple VPN connections.
An optional ``flavor_id`` attribute can be passed to enable dynamic
selection of an appropriate provider if configured by the operator.
It is only available when ``vpn-flavors`` extension is enabled.
The basic selection algorithm chooses the provider in the first
service profile currently associated with flavor. This option can
only be set in ``POST`` operation.
Normal response codes: 201 Normal response codes: 201
Error response codes: 400, 401 Error response codes: 400, 401
@ -1113,12 +1132,13 @@ Request
- vpnservice: vpnservice - vpnservice: vpnservice
- router_id: router_id - router_id: router_id
- description: description - description: description-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- subnet_id: subnet_id - subnet_id: subnet_id
- tenant_id: project_id - tenant_id: project_id
- project_id: project_id - project_id: project_id
- name: name - name: name-request
- flavor_id: flavor-id-request
Request Example Request Example
--------------- ---------------
@ -1134,7 +1154,7 @@ Response Parameters
- vpnservice: vpnservice - vpnservice: vpnservice
- router_id: router_id - router_id: router_id
- status: vpnservice-status - status: vpnservice-status
- name: name - name: name-request
- external_v6_ip: external_v6_ip - external_v6_ip: external_v6_ip
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- subnet_id: subnet_id - subnet_id: subnet_id
@ -1142,7 +1162,8 @@ Response Parameters
- project_id: project_id - project_id: project_id
- external_v4_ip: external_v4_ip - external_v4_ip: external_v4_ip
- id: vpnservice_id-body-response - id: vpnservice_id-body-response
- description: description - description: description-request
- flavor_id: flavor-id-response
Response Example Response Example
---------------- ----------------
@ -1180,7 +1201,7 @@ Response Parameters
- vpnservice: vpnservice - vpnservice: vpnservice
- router_id: router_id - router_id: router_id
- status: vpnservice-status - status: vpnservice-status
- name: name - name: name-request
- external_v6_ip: external_v6_ip - external_v6_ip: external_v6_ip
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- subnet_id: subnet_id - subnet_id: subnet_id
@ -1188,7 +1209,8 @@ Response Parameters
- project_id: project_id - project_id: project_id
- external_v4_ip: external_v4_ip - external_v4_ip: external_v4_ip
- id: vpnservice_id-body-response - id: vpnservice_id-body-response
- description: description - description: description-request
- flavor_id: flavor-id-response
Response Example Response Example
---------------- ----------------
@ -1216,8 +1238,8 @@ Request
.. rest_parameters:: parameters.yaml .. rest_parameters:: parameters.yaml
- vpnservice: vpnservice - vpnservice: vpnservice
- description: description - description: description-request
- name: name - name: name-request
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- service_id: vpnservice_id-path - service_id: vpnservice_id-path
@ -1235,7 +1257,7 @@ Response Parameters
- vpnservice: vpnservice - vpnservice: vpnservice
- router_id: router_id - router_id: router_id
- status: vpnservice-status - status: vpnservice-status
- name: name - name: name-request
- external_v6_ip: external_v6_ip - external_v6_ip: external_v6_ip
- admin_state_up: admin_state_up - admin_state_up: admin_state_up
- subnet_id: subnet_id - subnet_id: subnet_id
@ -1243,7 +1265,8 @@ Response Parameters
- project_id: project_id - project_id: project_id
- external_v4_ip: external_v4_ip - external_v4_ip: external_v4_ip
- id: vpnservice_id-body-response - id: vpnservice_id-body-response
- description: description - description: description-request
- flavor_id: flavor-id-response
Response Example Response Example
---------------- ----------------