openstack
/
neutron-fwaas
Code Issues Proposed changes

Merge "Add reno for "OVS based l2 Firewall driver for FWaaS v2""

This commit is contained in:
Zuul 2017-12-07 05:19:11 +00:00 committed by Gerrit Code Review
parent b5b4491d8f b0b8d9e8df
commit cef88d227d
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
releasenotes/notes/ovs-firewall-driver-c347ea0a560b7e38.yaml Normal file
View File

@ -0,0 +1,16 @@
---
issues:
- |
Currently, the FWaaSv2 L2 driver can be configured as:
``firewall_driver = ovs``
And the Security Group driver is specified as:
``firewall_driver = openvswitch``
If both are configured, the packet will still only hit the FWaaS table in
OVS and will not traverse the rules in the SG table. There are some fixes
needed to support this model which are being tested and will be merged
shortly. Currently there are no checks to allow only one of FWaaS L2 or SG
to be configured.