All,


With the Stein release we will remove support for FWaaS V1 [1]. It has been 
marked deprecated since Liberty (2015)  and was an experimental API. It is 
being replaced with FWaaS V2 [2] which has been available since the Newton 
release.


What is Neutron FWaaS?

Firewall-as-a-Service is a neutron project which provides router (L3) and port 
(L2) firewalls to protect networks and vms. [3]


What is Neutron FWaaS V1?

FWaaS V1 was the first implementation of Firewall-as-a-Service and focused on 
the router port. This implementation has been ported to FWaaS V2.


What is FWaaS V2?

FWaaS V2 extends Firewall-as-a-Service to any neutron port - thus offering the 
same functionality as Security Groups but with a richer API (e.g. deny/reject 
traffic).


Why is FWaaS V1 being removed?

FWaaS V1 has been deprecated since 2015 and with FWaaS V2 being released for 
several cycles it is time to remove FWaaS V1.


How do I migrate?

Existing firewall policies and rules need to be recreated with FWaaS V2. At 
this point we don’t offer an automated migration tool.


[1] 
https://developer.openstack.org/api-ref/network/v2/#fwaas-v1-0-deprecated-fw-firewalls-firewall-policies-firewall-rules


[2] 
https://developer.openstack.org/api-ref/network/v2/#fwaas-v2-0-current-fwaas-firewall-groups-firewall-policies-firewall-rules


[3] https://www.youtube.com/watch?v=9Wkym4BeM4M


__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to