Quantum-generic-firewall - Revision history

Clark Boylan at 22:29, 16 February 2013

2013-02-16T22:29:25Z

Juliano at 22:25, 29 May 2012

2012-05-29T22:25:24Z

Juliano at 21:07, 21 May 2012

2012-05-21T21:07:29Z

Juliano at 21:05, 21 May 2012

2012-05-21T21:05:26Z

Juliano at 21:03, 21 May 2012

2012-05-21T21:03:51Z

Juliano at 19:18, 21 May 2012

2012-05-21T19:18:45Z

Juliano at 17:24, 21 May 2012

2012-05-21T17:24:56Z

Juliano at 17:22, 21 May 2012

2012-05-21T17:22:17Z

Juliano at 17:16, 21 May 2012

2012-05-21T17:16:24Z

Juliano at 22:36, 18 May 2012

2012-05-18T22:36:33Z

@@ Line 1: / Line 1: @@
 * '''Git Branch''': https://github.com/locaweb/quantum
 = Handling layer 3 =
-<<[[TableOfContents]]()>>
+__TOC__
 == Abstract ==
@@ Line 11: / Line 10: @@
 == Design ==
-[[Media:quantum-generic-firewall$quantum-generic-firewall-flow.jpg||alt L3 Firewalls Design]]
+[[Image:quantum-generic-firewall-flow.jpg||alt L3 Firewalls Design]]
 == Summary ==
@@ Line 22: / Line 21: @@
 Firewall agent runs on top of linux firewall box, each ip has its own firewall policy for input and output traffic and you can also enforce a range or network policy to each one which will prevail over the bottom level policy, according to the follow hierarchy: network > vlan > range > ip
-[[Media:quantum-generic-firewall$quantum-generic-firewall.jpg||alt L3 Firewalls Workflow]]
+[[Image:quantum-generic-firewall.jpg||alt L3 Firewalls Workflow]]
-<<BR>>
-[[Media:quantum-generic-firewall$quantum-generic-firewall-agent.jpg||alt L3 Firewalls Agent]]
+----
 = Proposed Quantum API Operations =
@@ Line 40: / Line 41: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/policies.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <policy>
      <protocol>tcp</protocol>
@@ Line 46: / Line 47: @@
      <dst_port>80</dst_port>
 </policy>
-</nowiki></pre>
+</source>
 Response:
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <policy>
      <id>98017ddc-efc8-4c25-a915-774b2a633855<id/>
@@ Line 58: / Line 58: @@
      <dst_port>80</dst_port>
 </policy>
-</nowiki></pre>
+</source>
 '''List Policies'''
@@ Line 69: / Line 68: @@
 Response:
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <policies>
      <!-- network policy -->
@@ Line 103: / Line 102: @@
      </policy>
 </policy>
-</nowiki></pre>
+</source>
 '''Delete Policy'''
@@ Line 120: / Line 118: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <vlan>
     <name>firewall-01</name>
 </vlan>
-</nowiki></pre>
+</source>
 == Vlans ==
@@ Line 135: / Line 132: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/vlan.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <vlan>
     <name>vl-smtp-01</name>
 </vlan>
-</nowiki></pre>
+</source>
 '''Attach a Vlan to device'''
@@ Line 146: / Line 142: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device/98017ddc-efc8-4c25-a915-774b2a633859/ranges.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <vlan>
     <name>vl-smtp-01</name>
 </vlan>
-</nowiki></pre>
+</source>
 == Ranges ==
@@ Line 162: / Line 157: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/vlan/98017ddc-efc8-4c25-a915-774b2a633858/ranges.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <ip_range>
     <address>192.168.0.0/24</address>
 </ip_range>
-</nowiki></pre>
+</source>
 == IPs ==
@@ Line 178: / Line 172: @@
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/ports/98017ddc-efc8-4c25-a915-774b2a633855/ips.xml
-<pre><nowiki>#!highlight xml
+<source lang="xml">
 <ip>
     <address>192.168.0.3</address>
 </ip>
-</nowiki></pre>
+</source>
-(Contact: Willian Molinari ([[PotHix]]), Thiago Morello, Juliano Martinez (ncode)) <<BR>>
+(Contact: Willian Molinari ([[PotHix]]), Thiago Morello, Juliano Martinez (ncode))

@@ Line 20: / Line 20: @@
 === Firewall ===
-Firewall agent run o top of linux firewall server, each ip has its own firewall policy for input and output traffic and you can also enforce a range or network policy to each one which will prevail over the bottom level policy, according to the follow hierarchy: network > vlan > range > ip
+Firewall agent runs on top of linux firewall box, each ip has its own firewall policy for input and output traffic and you can also enforce a range or network policy to each one which will prevail over the bottom level policy, according to the follow hierarchy: network > vlan > range > ip
 [[Media:quantum-generic-firewall$quantum-generic-firewall.jpg||alt L3 Firewalls Workflow]]

@@ Line 127: / Line 127: @@
-'''Attach a Vlan to device'''
+== Vlans ==
-POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device/98017ddc-efc8-4c25-a915-774b2a633859/ranges.xml
+POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/vlan.xml
 <pre><nowiki>#!highlight xml
@@ Line 138: / Line 142: @@
-== Vlans ==
+'''Attach a Vlan to device'''
-Describes Vlans associated with a network.
+POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device/98017ddc-efc8-4c25-a915-774b2a633859/ranges.xml
 <pre><nowiki>#!highlight xml

← Older revision		Revision as of 21:05, 21 May 2012
Line 127:		Line 127:


−	''Attach a Vlan to device'''	+	'''Attach a Vlan to device'''

	POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device/98017ddc-efc8-4c25-a915-774b2a633859/ranges.xml		POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device/98017ddc-efc8-4c25-a915-774b2a633859/ranges.xml

@@ Line 142: / Line 142: @@
 Describes Vlans associated with a network.
-''Create Vlan/Associate with a network'''
+'''Create Vlan/Associate with a network'''
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/vlan.xml

@@ Line 116: / Line 116: @@
 Describes Devices associated with a network.
-''Create Devices/Associate with a network'''
+'''Create Devices/Associate with a network'''
 POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device.xml

← Older revision		Revision as of 17:16, 21 May 2012
Line 111:		Line 111:

	DELETE /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/policies/98017ddc-efc8-4c25-a915-774b2a633855.xml		DELETE /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/policies/98017ddc-efc8-4c25-a915-774b2a633855.xml
		+
		+	== Devices ==
		+
		+	Describes Devices associated with a network.
		+
		+	''Create Devices/Associate with a network'''
		+
		+	POST /tenants/XYZ/networks/158233b0-ca9a-40b4-8614-54a4a99d47d1/device.xml
		+
		+	<pre><nowiki>#!highlight xml
		+	<vlan>
		+	<name>firewall-01</name>
		+	</vlan>
		+	</nowiki></pre>
		+

	== Vlans ==		== Vlans ==