Re: [Openstack] [openstack-dev][neutron] Neutron firewall

2017-02-01 Thread Vikash Kumar
We have deployed VYOS Firewall in deployment with the current scope of APIs somewhat like Van mentioned in his mail. But my experience says the current FWaaS API still need work for most of cloud deployment. On Wed, Feb 1, 2017 at 3:36 PM, Jose Manuel Ferrer Mosteiro < jmferrer.paradigmatecnolog.

Re: [Openstack] [openstack-dev][neutron] Neutron firewall

2017-02-01 Thread Jose Manuel Ferrer Mosteiro
Hi Firewall policies can be implemented with security groups. You can create as many isolated networks and routers as you want so an instance can be isolated in its own network ... but I prefer using security groups and creating a network for service (kubernetes: master network, minion proje

Re: [Openstack] [openstack-dev][neutron] Neutron firewall

2017-01-31 Thread Morales, Victor
Hey Cesar, First of all, I haven’t use Vyattas at all, but I noticed that there is neutron driver for that[1]. If you want to keep the current Vyattas deployment it’s fine, more likely you’ll need to install a neutron agent there. I’m not sure if you also need to populate the Neutron Database

Re: [Openstack] [openstack-dev][neutron] Neutron firewall

2017-01-31 Thread Van Leeuwen, Robert
> We currently have a cloud infrastructure meeting our own requirements. > Let's focus on some Networking features (firewall, instances isolation, > spoofing control). We are thinking about moving to OpenStack and when we > focus on these Networking features, Neutron comes into play > We are curr

[Openstack] [openstack-dev][neutron] Neutron firewall

2017-01-31 Thread Cesar Benito Hernández
We currently have a cloud infrastructure meeting our own requirements. Let's focus on some Networking features (firewall, instances isolation, spoofing control). We are thinking about moving to OpenStack and when we focus on these Networking features, Neutron comes into play. We are currently us