openstack
/
neutron-fwaas
Code Issues Proposed changes
neutron-fwaas/devstack
History
Elena Ezhova 2c47f7122c [DevStack] Configure iptables_v2 firewall driver for FWaaS V2. 
Currently DevStack configures iptables v1 firewall driver for
both FWaaS versions. In case of V2 it means that all calls to
firewall group related driver methods are handled by the
FwaasDriverBase metaclass and are actually no-op.

Also updated FWaaS V2 scenario test to configure firewall rule
that'd allow SSH.

Change-Id: I0bdb4998f21d65564a30b6faa0250aad68f5c7b2
(cherry picked from commit 21d18e303c)
 		2017-08-22 20:19:36 +00:00
..
lib Add devstack plugin support for fwaas v2 2016-09-23 19:38:29 +00:00
README.rst Update the documentation link for doc migration 2017-07-20 07:15:27 +00:00
plugin.sh [DevStack] Configure iptables_v2 firewall driver for FWaaS V2. 2017-08-22 20:19:36 +00:00
settings [DevStack] Configure iptables_v2 firewall driver for FWaaS V2. 2017-08-22 20:19:36 +00:00

README.rst

neutron-fwaas in DevStack

This is setup as a DevStack plugin. For more information on DevStack plugins, see the DevStack Plugins documentation.

Please note that the old 'q-fwaas' keyword still exists, and will run FWaaS V1. This default will be changed during the Ocata cycle. The introduction of two new keywords, 'q-fwaas-v1' and 'q-fwaas-v2' allow you to explicitly select the version you with to run.

How to run FWaaS V2 in DevStack

Add the following to the localrc section of your local.conf to configure FWaaS v2.

[[local|localrc]]
enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas
enable_service q-fwaas-v2

To check a specific patchset that is currently under development, use a form like the below example, which is checking out change 214350 patch set 14 for testing.

[[local|localrc]]
enable_plugin neutron-fwaas https://review.openstack.org/p/openstack/neutron-fwaas refs/changes/50/214350/14
enable_service q-fwaas-v2

How to run FWaaS V1 in DevStack

Add the following to the localrc section of your local.conf to configure FWaaS v1.

[[local|localrc]]
enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas
enable_service q-fwaas-v1

To check a specific patchset that is currently under development, use a form like the below example, which is checking out change 214350 patch set 14 for testing.

[[local|localrc]]
enable_plugin neutron-fwaas https://review.openstack.org/p/openstack/neutron-fwaas refs/changes/50/214350/14
enable_service q-fwaas-v1