Bug 1468035

Summary:	[RFE] Support migration from IPTables firewall driver to Open vSwitch
Product:	Red Hat OpenStack	Reporter:	Ihar Hrachyshka <ihrachys>
Component:	openstack-neutron	Assignee:	Assaf Muller <amuller>
Status:	CLOSED WONTFIX	QA Contact:	Toni Freger <tfreger>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	13.0 (Queens)	CC:	amuller, chrisw, fbaudin, nyechiel, srevivo
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-02-11 09:05:34 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ihar Hrachyshka 2017-07-05 19:59:19 UTC

This is a follow up to the base RFE that covers implementation for the new firewall driver that is: https://bugzilla.redhat.com/show_bug.cgi?id=1385341 A decision was made to split out migration between drivers into a separate RFE tracked for Queens, hence this new RFE.

This migration may be important for OVN efforts depending on how OVS-to-OVN migration itself is implemented.

Comment 1 Red Hat Bugzilla Rules Engine 2017-07-05 19:59:36 UTC

This bugzilla has been removed from the release and needs to be reviewed and Triaged for another Target Release.

Comment 2 Nir Yechiel 2018-03-18 11:27:17 UTC

As we move to OVN, I don't see any need to prioritize this work (which is specific to ml2/ovs). @Assaf, before I close this bug - can you confirm that I am not missing anything?

Comment 3 Nir Yechiel 2018-03-18 11:29:01 UTC

(In reply to Nir Yechiel from comment #2)
> As we move to OVN, I don't see any need to prioritize this work (which is
> specific to ml2/ovs). @Assaf, before I close this bug - can you confirm that
> I am not missing anything?

I guess my main question is do we want to migrate ml2/ovs customers to the native OVS firewall driver before we migrate them to OVN?

Comment 4 Franck Baudin 2019-02-11 09:05:34 UTC

Entreprise use case should migrate to OVN. And for NVF, they already use openvswitch firewall (iptables has never been an option with OVS-DPDK).