Quantum/FWaaS/IcehousePlan

Neutron FWaaS Havana

The following is the proposed plan/schedule for design and implementation of features for Firewall As A Service feature in OpenStack Networking for the Icehouse release. This lists the items which we discussed during the Icehouse summit.

Community Blueprints

Task	Blueprint	Milestone
Tempest	https://blueprints.launchpad.net/tempest/+spec/fwaas-api-tempest	I1
Firewall Insertion	https://blueprints.launchpad.net/neutron/+spec/fwaas-service-insertion	I1
Service type framework integration	https://blueprints.launchpad.net/neutron/+spec/fwaas-service-types-integration	I1
Zones	https://blueprints.launchpad.net/neutron/+spec/fwaas-zones-api	I2
Address Objects	https://blueprints.launchpad.net/neutron/+spec/fwaas-address-objects	I2
Service objects and icmp types/codes	https://blueprints.launchpad.net/neutron/+spec/fwaas-customized-service	I2
Counters	https://blueprints.launchpad.net/neutron/+spec/fwaas-counters-api, https://blueprints.launchpad.net/neutron/+spec/firewall-hitcounts	?
Admin guide		I3
API doc		I3
Apply Operation for firewall API	https://blueprints.launchpad.net/neutron/+spec/neutron-fwaas-explicit-commit	?
Apply Operation for firewall CLI	https://blueprints.launchpad.net/python-neutronclient/+spec/fwaas-commit-operation	?
Heat		I3
Firewall Rules Blob	https://blueprints.launchpad.net/neutron/+spec/firewall-rules-blob	?
Cloning of rules/policies

Reference Implementation

This will continue to be the IPTables based implementation.

Firewall Mode

This will continue to be a perimeter firewall. However, insertion will be supported on a per router basis.

Vendor Blueprints

Task	Blueprint	Milestone

Bugs

Neutron

https://bugs.launchpad.net/neutron/+bugs?field.tag=fwaas

Neutron Client

https://bugs.launchpad.net/python-neutronclient/+bugs?field.tag=fwaas

Horizon

https://bugs.launchpad.net/horizon/+bugs?field.tag=fwaas

Heat

https://bugs.launchpad.net/heat/+bugs?field.tag=fwaas