Bug 1042588

Summary: [RFE][neutron]: Firewall as a Service (FWaaS) extension to support DSCP filters
Product: Red Hat OpenStack Reporter: RHOS Integration <rhos-integ>
Component: RFEsAssignee: RHOS Maint <rhos-maint>
Status: CLOSED UPSTREAM QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: markmc, yeylon
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/neutron/+spec/neutron-fwaas-extension-dscp
Whiteboard: upstream_milestone_none upstream_status_unknown upstream_definition_obsolete
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-19 17:21:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description RHOS Integration 2013-12-13 00:26:05 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/neutron/+spec/neutron-fwaas-extension-dscp.

Description:

The Firewall as a Service (FWaaS) set of BP's aims at providing a reference Firewall implementation for the OpenStack community. The implementation leverages the L3 agent and uses IP tables for the backend. The intent is to provide a perimeter firewall in the Havana timeframe.

There is interest to look at filters beyond the basic support (5 tuple) that is being provided in the FWaaS reference implementation. There is an immediate interest to support filters on the DSCP marking on IP packets.

With this BP, we propose to add this capability for DSCP based filtering as an extension to FWaaS. 

Specification URL (additional information):

None