Reviewed: https://review.openstack.org/536234 Committed: https://git.openstack.org/cgit/openstack/neutron-fwaas/commit/?id=358c2edb53c9bfc8ad1d91d74f3a16a1a07fc502 Submitter: Zuul Branch: master
commit 358c2edb53c9bfc8ad1d91d74f3a16a1a07fc502 Author: Nguyen Phuong An <[email protected]> Date: Mon Jan 22 13:50:55 2018 +0700 Validating if a port is supported by FWaaS L2 driver Currently, FWaaS L2 driver based OVS only works correctly with VM ports, which are landed at compute nodes with: * mechanism_drivers=openvswitch * firewall_driver=noop or openvswitch for security group If you try to add a VM port to a FWG, which is landed at compute nodes with: * mechanism_drivers=linuxbridge and firewall_driver=iptables * mechanism_drivers=openvswitch and firewall_driver=iptables_hybrid Then, FWaaS V2 API won't work correctly. So this patch validates if VM ports are supported fully by FWaaS L2 driver at this moment. In the future, if FWaaS L2 driver can support not only hybrid port but also other ports, we can remove this validation. Change-Id: Ib0a85b55840d8dfe6bcae91484a0440902d3c49a Closes-Bug: #1746855 ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1746855 Title: FWaaS V2 failures with Ml2 is Linuxbridge or security group driver is iptables_hybrid Status in neutron: Fix Released Bug description: Current, FWaaS L2 driver based openvswitch only works correctly with vm ports, which are landed at compute nodes with mechanism driver is openvswtich. So if you try to add a vm port to a FWG, which is landed at compute nodes with mechanism driver is linuxbridge, then FWaaS API won't work. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1746855/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
