I have implemented 4 node architecture using gre as tunnel network method with kilo release on ubuntu 14.04 . Here is the network topology diagram .

*Note : Using maria DB as Database . Note:ml2 as core plugin* Every thing is working fine including lbass .

Here is the Fwaas configuration ..

In controller node changes made on neutron.conf file for fwaas

service_plugins = route,lbaas,firewall

[service_providers]

service_provider = FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default

In network node i have configured following file .

1) changes made in neutron.conf

service_plugins = firewall [service_providers] ...

service_provider = FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default

2) enable the following parameter in fwaas_driver.ini [fwaas] driver = neutron.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

Restarted all related service on controller and compute node .

But when i am trying to create rule and policy it is working smoothly and successfully created but when trying to create fireawall using a policy getting error Error: Unable to retrieve routers (Request Failed: internal server error while processing your request.). on both cli and dashboard .

Error: Unable to associate with the router

Surprising fact for me ---- When i am creating firewall without selecting router it is giving me successful message but showing following error.

Error: Unable to retrieve firewall list.

in the database neutron--firewalls , i can see firewall has been created but inactive .

I have made the debug on neutron and getting following error .

2015-05-24 19:49:02.989 23704 INFO neutron.wsgi [-] (23704) accepted ('10.0.0.12', 55285) 2015-05-24 19:49:02.998 23704 ERROR neutron.api.v2.resource [req-1df5b871-da1b-4717-8c31-b2f23082d0c2 ] index failed 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource Traceback (most recent call last): 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/resource.py", line 83, in resource 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource result = method(request=request, args) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/base.py", line 319, in index 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource return self._items(request, True, parent_id) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/api/v2/base.py", line 249, in _items 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource obj_list = obj_getter(request.context, *kwargs) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron_fwaas/services/firewall/fwaas_plugin.py", line 381, in get_firewalls 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource fw_current_rtrs = self.get_firewall_routers(context, fw['id']) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource File "/usr/lib/python2.7/dist-packages/neutron/common/log.py", line 34, in wrapper 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource return method(args, *kwargs) 2015-05-24 19:49:02.998 23704 TRACE neutron.api.v2.resource ...