Jump to: navigation, search


< Neutron
Revision as of 03:14, 25 August 2013 by Gduan (talk | contribs) (Configuration)


vArmour's OpenStack integration contains two components:

  • L3 Agent replacement: This component configurse vArmour firewall to be the gateway of internal gateway and support SNAT and Floating IP (DNAT) function. It inherits neutron L3 Agent module. Instead of using iptables, the module makes RESTful API calls to program vArmour firewall.
  • FWaaS driver: Based on neutron FWaaS service extension, this component is a FWaaS driver implements to configure vArmour Firewall



Firewall as a Service vArmour driver


Please refer to FWaaS Installation Guide on how to enable FWaaS service

  • Add the following configuration to l3_agent.ini to specify vArmour firewall director's IP address and login account
director =
director_port = 443
username = varmour
password = varmour
  • Modify fwaas_driver.ini to use vArmour's FWaaS driver
enabled = True
driver = neutron.services.firewall.drivers.varmour.varmour_fwaas.vArmourFwaasDriver
  • Modify neutron-l3-agent script to start vArmour's L3 Agent
#from neutron.agent.l3_agent import main
from neutron.services.firewall.agents.varmour.varmour_router import main