Ask Your Question
0

How to install FWaaS in Openstack kilo.

asked 2016-05-04 05:55:39 -0500

craja gravatar image

updated 2016-05-06 06:15:10 -0500

Hello All,

I am a new user and I couldn't find any relevant answers for my question.

I have installed Openstack kilo with 3 node architecture in Ubuntu 14.04 using the below link:

http://docs.openstack.org/kilo/install-guide/install/apt/content/ (http://docs.openstack.org/kilo/instal...)

I am able to stage it successfully. Now, I want to install Fwaas in this architecture(Looks like there is a panel named Firewall appears in Horizon > network link after installing this?)

I couldn't find any doc related to this. Could someone please provide any pointer for this?

Thanks in Advance!!!

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by » oldest newest most voted
1

answered 2016-05-26 05:44:19 -0500

craja gravatar image

updated 2016-05-26 05:45:24 -0500

Finally, I enabled the Firewall as a Service in Openstack kilo by the below procedure. Just adding this so that it may help someone.

  1. Added "service_plugins = router,neutron_fwaas.services.firewall.fwaas_plugin.FirewallPlugin" in neutron.conf on both controller and network node.

  2. Added the below line in fwaas_driver.ini on network node.

    [DEFAULT] [fwaas] driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

  3. Restarted all neutron services in Network node and neutron server in controller node.
  4. Set "True" against firewall in local_settings.py on controller node and restarted apache.

That's it! Got the firewall panel on the Horizon GUI. Also able to apply FW policies to the VMs from the router level.

Thanks, craja

edit flag offensive delete link more

Comments

Hi what kind of package have you installed？ such as openstack-neutron-fwaas or python-neutron-fwaas?

yan gravatar imageyan ( 2017-03-23 16:23:25 -0500 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-05-04 05:55:39 -0500

Seen: 328 times

Last updated: May 26 '16

Related questions

cinder create volume fails with http 400 image inactive

Live Migrate kilo NFS storage [closed]

RabbitMQ failover issue Kilo

Creating instances fails on Kilo (ubuntu 15.04)

Migration operation has aborted. [closed]

How to create a cinder volume with "multiattach=true" in Kilo-2015.1.1? [closed]

Provider network using compute nodes' NICs

Public IPv6 for tenant VMs with Kilo

File Upload in Swift client return "error 503 service unavailable"

[Kilo] error while installing keystone with apache2 and mod_wsgi [closed]