Cloned from launchpad blueprint https://blueprints.launchpad.net/neutron/+spec/neutron-dvr-fwaas.
The DVR model breaks basic FWaaS implementation as FWaaS relies on seeing both directions of traffic (stageful) at the router programmed with Firewall rules. DVR by design distributes routing across compute nodes to achieve scalability and this has unfavorable consequences for FWaaS. The first step is to at least ensure that we have an L3 Perimeter Firewall working for the North-South traffic use case.
Specification URL (additional information):
This RFE was automatically opened to track status of upstream development. At this point we see no reason to keep track of this in Red Hat bugzilla, thus closing it.