Hide Forgot
1. Proposed title of this feature request Provide alternative for SSL termination of lbaas vip without barbican 3. What is the nature and description of the request? Neutron lbaas vips should have a configurable means for ssl termination without barbican. 4. Why does the customer need this? (List the business requirements here) Upstream doc provides steps to configure ssl termination with barbican only https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer Although we do not provide barbican & there is not fixed timeline to include the same with our OpenStack release . ssl/tls termination is mostly sought use case in neutron-lbaas . We need to provide some solution until barbican is available . 5. How would the customer like to achieve this? (List the functional requirements here) 6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented. 7. Is there already an existing RFE upstream or in Red Hat Bugzilla? No . * Feature to get barbican to fedora: https://bugzilla.redhat.com/show_bug.cgi?id=1190269
@Nir, can you confirm that Barbican is the way forward for TLS termination when using Octavia? If so, it makes sense to pursue the inclusion of Barbican in to OSP.
(In reply to Assaf Muller from comment #3) > @Nir, can you confirm that Barbican is the way forward for TLS termination > when using Octavia? If so, it makes sense to pursue the inclusion of > Barbican in to OSP. "The initial supported implementation for TLS related functions will be Barbican, but the interface will be generic such that other implementations could be created later." Source: http://octavia.io/review/master/specs/version0.5/tls-data-security.html We should incorporate Barbican in OSP.
The focus is on Octavia now, which offers SSL termination using Barbican. There are no plans to offer an alternative at this time.