[openstack-dev] [fwaas] vArmour code question, when the snat dnat process router is triggered?

2015-12-29 Thread Oguz Yarimtepe
Hi, I am trying to understand the vArmour fwaas driver. Testing it on Devstack Liberty environment. Configured it and running its L3 agent replacement also. But i couldn't find when the code execution comes to the line

Re: [openstack-dev] [neutron][fwaas]some architectural advice on fwaas driver writing

2015-12-28 Thread Oguz Yarimtepe
After seeing that vYatta requires a driver plugged in to the interface, i gave up debugging it. Now i am trying vArmour driver. Looks simpler. Many things are clearer except from that they have their own L3 agent. It sees it should be enabling API calls when a new router is added, removed or

[openstack-dev] [keystone] RBAC usage at production

2015-12-09 Thread Oguz Yarimtepe
Hi, I am wondering whether there are people using RBAC at production. The policy.json file has a structure that requires restart of the service each time you edit the file. Is there and on the fly solution or tips about it?

[openstack-dev] [neutron][fwaas]

2015-11-26 Thread Oguz Yarimtepe
Hi, I am trying to fork vArmour FWaaS driver and didn't find how and when https://github.com/openstack/neutron-fwaas/blob/master/neutron_fwaas/services/firewall/agents/varmour/varmour_router.py#L276 function is called. I put pdb traces but starting neutron-l3-agent never fall in to a debug

[openstack-dev] [neutron][sfc]

2015-11-24 Thread Oguz Yarimtepe
Hi, Is there any working Devstack configuration for sfc testing? I just saw one commit that is waiting review. __ OpenStack Development Mailing List (not for usage questions) Unsubscribe:

Re: [openstack-dev] [neutron][fwaas]some architectural advice on fwaas driver writing

2015-11-20 Thread Oguz Yarimtepe
I created a sample driver by looking at vArmour driver that is at the Github FWaaS repo. I am planning to call the FW's REST API from the suitable functions. The problem is, i am still not sure how to locate the hardware appliance. One of the FWaaS guy says that Service Chaining can help, any