Bug 1656420

Summary:	[doc] NFV documentation lack of recommendation with OVS firewall usage
Product:	Red Hat OpenStack	Reporter:	Franck Baudin <fbaudin>
Component:	openstack-neutron	Assignee:	Derek <dcadzow>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Yariv <yrachman>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	10.0 (Newton)	CC:	amuller, cfontain, chrisw, hakhande, nyechiel, rheslop
Target Milestone:	---	Keywords:	Documentation, Triaged
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1671176 (view as bug list)		Environment:
Last Closed:	2019-01-02 20:50:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1671176

Description Franck Baudin 2018-12-05 13:42:16 UTC

Description of problem:

NFV documentation is accurate but misleading, as the templates examples include NeutronOVSFirewallDriver: openvswitch

All details in:
http://post-office.corp.redhat.com/archives/nfv-tech/2018-December/msg00057.html

Expected results:

Bring clarity and guidance to NFV users.

Documentation explanation proposal:

"""
The openvswitch firewall driver is Tech Preview in RHOSP10, and GA since RHOSP13, but its usage is restricted to VM management interface and should not be use in any cases for VNFci dataplane interfaces. If you need a Telco Grade stateful firewall, please consider deploying a VNF, as OVS is not intended to be used as a Telco Firewall.

More insights on why not to use it on dataplane interfaces in https://www.youtube.com/watch?v=YzD91dgyBgo&index=7&list=PLaJlRa-xItwD7ikTsrZOhju5xbE-QP9U1 and https://www.youtube.com/watch?v=R6JNxesVtQc&index=18&list=PLaJlRa-xItwD7ikTsrZOhju5xbE-QP9U1
"""

Comment 3 Roger Heslop 2019-01-02 20:50:11 UTC

published -> https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/10/html-single/network_functions_virtualization_configuration_guide/