This is good discussion. +1 for using Neutron ports for defining zones. I see Kaiwei's point but for DELL, neutron ports makes more sense.
I am not sure if I completely understood the bump-in-the-wire/zone discussion. DELL security appliance allows using different zones with bump-in-the-wire. If the firewall is inserted in bump-in-the-wire mode between router and LAN hosts, then it does makes sense to apply different zones on ports connected to LAN and Router. The there are cases where the end-users apply same zones on both sides but this is a decision we should leave to end customers. We should allow configuring zones in bump-in-the-wire mode as well. On Wed, Oct 23, 2013 at 12:08 PM, Sumit Naiksatam <sumitnaiksa...@gmail.com>wrote: > Log from today's meeting: > > > http://eavesdrop.openstack.org/meetings/networking_fwaas/2013/networking_fwaas.2013-10-23-18.02.log.html > > Action items for some of the folks included. > > Please join us for the meeting next week. > > Thanks, > ~Sumit. > > On Tue, Oct 22, 2013 at 2:00 PM, Sumit Naiksatam <sumitnaiksa...@gmail.com > > wrote: > >> Reminder - we will have the Neutron FWaaS IRC meeting tomorrow Wednesday >> 18:00 UTC (11 AM PDT). >> >> Agenda: >> * Tempest tests >> * Definition and use of zones >> * Address Objects >> * Counts API >> * Service Objects >> * Integration with service type framework >> * Open discussion - any other topics you would like to bring up for >> discussion during the summit. >> >> https://wiki.openstack.org/wiki/Meetings/FWaaS >> >> Thanks, >> ~Sumit. >> >> >> On Sun, Oct 13, 2013 at 1:56 PM, Sumit Naiksatam < >> sumitnaiksa...@gmail.com> wrote: >> >>> Hi All, >>> >>> For the next of phase of FWaaS development we will be considering a >>> number of features. I am proposing an IRC meeting on Oct 16th Wednesday >>> 18:00 UTC (11 AM PDT) to discuss this. >>> >>> The etherpad for the summit session proposal is here: >>> https://etherpad.openstack.org/p/icehouse-neutron-fwaas >>> >>> and has a high level list of features under consideration. >>> >>> Thanks, >>> ~Sumit. >>> >>> >>> >> >> > > _______________________________________________ > OpenStack-dev mailing list > OpenStack-dev@lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > >
_______________________________________________ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
