group-based-policy/gbpservice/contrib/nfp/tools/templates/fw.template
Rajendra Machani 380519eb46 NFP (contrib) - Controller Image Build Scripts
This changeset contains the following,
(1) NFP controller image builder tool
    This supports both devstack and Redhat RPM installations.
(2) NFP setup script to configure the NFP on RPM installed setup.

Change-Id: I074d713ad94286240fdae1887b0d4acd28f66144
Implements: blueprint gbp-network-services-framework
2016-08-03 17:03:01 +05:30

55 lines
1.4 KiB
Plaintext

{
"heat_template_version": "2013-05-23",
"description": "Configuration for Firewall service",
"resources": {
"Firewall": {
"type": "OS::Neutron::Firewall",
"properties": {
"admin_state_up": true,
"firewall_policy_id": {
"get_resource": "Firewall_Policy"
},
"name": "FWaaS",
"description": "Firewll Resource"
}
},
"Firewall_Policy": {
"type": "OS::Neutron::FirewallPolicy",
"properties": {
"description": "firewall policy Resource",
"audited": false,
"firewall_rules": [
{
"get_resource": "Rule_1"
},
{
"get_resource": "Rule_2"
}
],
"name": "FW_policy"
}
},
"Rule_1": {
"type": "OS::Neutron::FirewallRule",
"properties": {
"protocol": "tcp",
"name": "fw-tcp-rule",
"enabled": true,
"destination_port": "80",
"action": "allow",
"description": "fw config to allow tcp"
}
},
"Rule_2": {
"type": "OS::Neutron::FirewallRule",
"properties": {
"protocol": "icmp",
"name": "fw-icmp-rule",
"enabled": true,
"action": "allow",
"description": "fw config to allow icmp"
}
}
}
}