[RFE]Support for other protocols in Neutron Firewalls

Bug #1669956 reported by Reedip
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Won't Fix
Wishlist
Unassigned

Bug Description

Neutron Firewalls currently support ICMP, TCP and UDP protocols, while they can be easily extended to support other protocols ( like SCTP, DCCP etc).

This RFE is intended to track the same

Tags: fwaas rfe
Changed in neutron:
assignee: nobody → Reedip (reedip-banerjee)
tags: added: fwaas
tags: added: rfe
summary: - Support for other protocols in Neutron Firewalls
+ [RFE]Support for other protocols in Neutron Firewalls
Changed in neutron:
status: New → In Progress
Revision history for this message
Akihiro Motoki (amotoki) wrote :

RFE bug is usually reviewed based on its status (Triaged, Confirmed).
"In Progress" bug tends to get less interest. Is there any reason of In Progress status?

Revision history for this message
Akihiro Motoki (amotoki) wrote :

As a start, input from FWaaS team would be appreciated, though the request itself looks reasonable.

Changed in neutron:
status: In Progress → Confirmed
importance: Undecided → Wishlist
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron-lib (master)

Fix proposed to branch: master
Review: https://review.openstack.org/453110

Changed in neutron:
status: Confirmed → In Progress
Changed in neutron:
assignee: Reedip (reedip-banerjee) → Kevin Benton (kevinbenton)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on neutron-lib (master)

Change abandoned by Reedip (<email address hidden>) on branch: master
Review: https://review.openstack.org/453110

Changed in neutron:
assignee: Kevin Benton (kevinbenton) → Reedip (reedip-banerjee)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron-lib (master)

Fix proposed to branch: master
Review: https://review.openstack.org/455422

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron-lib (master)

Reviewed: https://review.openstack.org/455422
Committed: https://git.openstack.org/cgit/openstack/neutron-lib/commit/?id=d136fd4c62c1db4ac5760f1693dcd0fc38dae6fc
Submitter: Jenkins
Branch: master

commit d136fd4c62c1db4ac5760f1693dcd0fc38dae6fc
Author: reedip <email address hidden>
Date: Tue Apr 11 00:08:42 2017 +0530

    Add new protocols in Firewalls

    Firewall rules can now also filter DCCP and
    SCTP protocols.
    Partial-Bug: #1669956

    Change-Id: Ib7334655be3506aa6573954b36059cd7f875b320

Revision history for this message
YAMAMOTO Takashi (yamamoto) wrote :

it might be easy for iptables based implementation but i guess we should not assume it.
do you plan to introduce some way for api users to discover which protocol can be used?

Revision history for this message
Reedip (reedip-banerjee-deactivatedaccount) wrote :

I have added a Release Note in FWaaS for the IPTables based implementation. Other than that, let me know if we can propose the supported protocols to the users

Changed in neutron:
assignee: Reedip (reedip-banerjee) → Yushiro FURUKAWA (y-furukawa-2)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on neutron-fwaas (master)

Change abandoned by Reedip (<email address hidden>) on branch: master
Review: https://review.opendev.org/440331
Reason: Cannot work on it right now... anyone else can take it up

Revision history for this message
Slawek Kaplonski (slaweq) wrote :

Regarding current status of neutron-fwaas project I'm marking this RFE as won't fix for now.

Changed in neutron:
status: In Progress → Won't Fix
assignee: Yushiro FURUKAWA (y-furukawa-2) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.