neutron_fwaas.services.firewall.drivers.linux package¶

Submodules¶

neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas module¶

neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.CHAIN_NAME_PREFIX = {'ingress': 'i', 'egress': 'o'}¶

Firewall rules are applied on internal-interfaces of Neutron router. The packets ingressing tenant’s network will be on the output direction on internal-interfaces.

class neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver¶

Bases: neutron_fwaas.services.firewall.drivers.fwaas_base.FwaasDriverBase

IPTables driver for Firewall As A Service.

apply_default_policy(agent_mode, apply_list, firewall)¶

create_firewall(agent_mode, apply_list, firewall)¶

delete_firewall(agent_mode, apply_list, firewall)¶

update_firewall(agent_mode, apply_list, firewall)¶

neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas_v2 module¶

neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas_v2.CHAIN_NAME_PREFIX = {'ingress': 'i', 'egress': 'o'}¶

Firewall rules are applied on internal-interfaces of Neutron router. The packets ingressing tenant’s network will be on the output direction on internal-interfaces.

class neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas_v2.IptablesFwaasDriver¶

Bases: neutron_fwaas.services.firewall.drivers.fwaas_base_v2.FwaasDriverBase

IPTables driver for Firewall As A Service.

apply_default_policy(agent_mode, apply_list, firewall)¶

create_firewall_group(agent_mode, apply_list, firewall)¶

delete_firewall_group(agent_mode, apply_list, firewall)¶

initialize()¶

update_firewall_group(agent_mode, apply_list, firewall)¶

neutron_fwaas.services.firewall.drivers.linux.legacy_conntrack module¶

class neutron_fwaas.services.firewall.drivers.linux.legacy_conntrack.ConntrackLegacy¶

Bases: neutron_fwaas.services.firewall.drivers.conntrack_base.ConntrackDriverBase

delete_entries(rules, namespace)¶

flush_entries(namespace)¶

initialize(execute=None)¶

neutron_fwaas.services.firewall.drivers.linux.netlink_conntrack module¶

class neutron_fwaas.services.firewall.drivers.linux.netlink_conntrack.ConntrackNetlink¶

Bases: neutron_fwaas.services.firewall.drivers.conntrack_base.ConntrackDriverBase

delete_entries(rules, namespace)¶

flush_entries(namespace)¶

Flush all conntrack entries within the namespace

Parameters:	namespace – namespace to flush
Returns:	None

initialize(*args, **kwargs)¶

Module contents¶