Fresh Installation Steps: ========================= (1) Clone stable mitaka devstack. # git clone https://git.openstack.org/openstack-dev/devstack -b stable/mitaka (2) Get local.conf.nfp from NFP devstack patch and copy to devstack directory as local.conf # cd devstack/ # wget -O local.conf https://raw.githubusercontent.com/openstack/group-based-policy/master/devstack/local.conf.nfp (3) Install devstack. # ./stack.sh Re-installation Steps: ====================== (1) Follow these steps for cleanup. # cd devstack # ./unstack.sh # ./clean.sh # sudo rm -rf /opt/stack # cd .. # sudo rm -rf devstack (2) Follow the fresh installation steps. Steps to test Base Mode: ======================== (1) Create a test chain with the service VM. # cd /opt/stack/group-based-policy/devstack/exercises/nfp_service # bash lb_base.sh (2) Login to the UI, create one member in consumer group and two members in provider group. Consumer member is HTTP client and provider members should have webserver deployed. (3) Test loadbalancer with traffic from consumer VM getting loadbalanced between the two provider members. (4) Delete members created in the consumer and provider groups in step 2. (5) Delete the test chain. # cd /opt/stack/group-based-policy/devstack/exercises/nfp_service # bash lb_base_clean.sh Steps to test Base Mode with VM: ================================ (1) Create a test chain with the service VM. # cd /opt/stack/group-based-policy/devstack/exercises/nfp_service # bash fw_base_vm.sh (2) Login to the UI, create a member in the consumer and provider groups. (3) Test firewall with traffic from consumer VM. (4) Log-in into service VM # cd /opt/stack/group-based-policy/gbpservice/contrib/nfp/tools/image_builder # sudo ip netns exec nfp-proxy ssh -i nfp_reference_service ubuntu@ (5) Delete members created in the consumer and provider groups in step 2. (6) Delete the test chain. # cd /opt/stack/group-based-policy/devstack/exercises/nfp_service # bash fw_base_vm_clean.sh