Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS

2015-08-30 Thread bharath
Hi Sean, Have you got the chance to test firewall locally? Any Clue on the issue i am facing? Thanks, bharath On Friday 28 August 2015 07:21 AM, Sean M. Collins wrote: Do you have a known good commit for the FwaaS repo? Or Neutron? Perhaps you can run a git-bisect to find the commit that i

Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS with DVR

2015-08-30 Thread hdh1983
On 08/28/2015 02:53 PM, Germy Lure wrote: Hi all, I have two points. a. For the problem in this thread, my suggestion is to introduce new concepts to replace the existing firewall and SG. Perhaps you have found the overlap between firewall and SG. It's trouble for user to select. So the new co

Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS with DVR

2015-08-27 Thread Germy Lure
Hi all, I have two points. a. For the problem in this thread, my suggestion is to introduce new concepts to replace the existing firewall and SG. Perhaps you have found the overlap between firewall and SG. It's trouble for user to select. So the new concepts are edge-firewall for N/S traffic and D

Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS

2015-08-27 Thread Sean M. Collins
Do you have a known good commit for the FwaaS repo? Or Neutron? Perhaps you can run a git-bisect to find the commit that introduced. Labor intensive, but I did a little digging in FwaaS and didn't see anything that was obvious. -- Sent from my Android device with K-9 Mail. Please excuse my brevi

Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS

2015-08-27 Thread bharath
Hi , Adding more info create_firewall(self, agent_mode, apply_list, firewall) and update_firewall(self, agent_mode, apply_list, firewall) api's are getting called with empty apply list apply_list is generated by the _get_router_info_list_for_tenant. The rootcause for returning empty list is

[openstack-dev] [neutron][L3][dvr][fwaas] FWaaS

2015-08-27 Thread bharath
Hi, while testing the fwaas , i found router_info is not getting updated. list awlays seems to be empty and getting updated only after the restart of fw agent. This issue resulting empty list while calling _get_router_info_list_for_tenant. i can see some comments as *"for routers without

Re: [openstack-dev] [neutron][L3][dvr][fwaas] FWaaS with DVR

2015-08-27 Thread Mickey Spiegel
Bump The FWaaS team would really like some feedback from the DVR side. Mickey -Mickey Spiegel/San Jose/IBM wrote: - To: openstack-dev@lists.openstack.org From: Mickey Spiegel/San Jose/IBM Date: 08/19/2015 09:45AM Subject: [fwaas][dvr] FWaaS with DVR Currently, FWaaS behaves differently