Ask Your Question
0

How to install FWaaS in Openstack kilo.

asked 2016-05-04 05:55:39 -0500

craja gravatar image

updated 2016-05-06 06:15:10 -0500

Hello All,

I am a new user and I couldn't find any relevant answers for my question.

I have installed Openstack kilo with 3 node architecture in Ubuntu 14.04 using the below link:

http://docs.openstack.org/kilo/install-guide/install/apt/content/ (http://docs.openstack.org/kilo/instal...)

I am able to stage it successfully. Now, I want to install Fwaas in this architecture(Looks like there is a panel named Firewall appears in Horizon > network link after installing this?)

I couldn't find any doc related to this. Could someone please provide any pointer for this?

Thanks in Advance!!!

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by » oldest newest most voted
1

answered 2016-05-26 05:44:19 -0500

craja gravatar image

updated 2016-05-26 05:45:24 -0500

Finally, I enabled the Firewall as a Service in Openstack kilo by the below procedure. Just adding this so that it may help someone.

  1. Added "service_plugins = router,neutron_fwaas.services.firewall.fwaas_plugin.FirewallPlugin" in neutron.conf on both controller and network node.

  2. Added the below line in fwaas_driver.ini on network node.

    [DEFAULT] [fwaas] driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

  3. Restarted all neutron services in Network node and neutron server in controller node.
  4. Set "True" against firewall in local_settings.py on controller node and restarted apache.

That's it! Got the firewall panel on the Horizon GUI. Also able to apply FW policies to the VMs from the router level.

Thanks, craja

edit flag offensive delete link more

Comments

Hi what kind of package have you installed？ such as openstack-neutron-fwaas or python-neutron-fwaas?

yan gravatar imageyan ( 2017-03-23 16:23:25 -0500 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-05-04 05:55:39 -0500

Seen: 336 times

Last updated: May 26 '16

Related questions

NUMA awareness during instance placement [closed]

Swift in Kilo - difference between --os-tenant-name and --os-project-name

[kilo]Failed to compute_task_build_instances: No valid host was found. There are not enough hosts available

Lbaas in Kilo error

Kilo MySQL mysqld_openstack.cnf on Ubuntu

modify default settings of lbaas haproxy

gre missing on ovs-vsctl show

DHCPOFFER getting dropped at tap device

Issues with SSL enabled keystone endpoint - KILO

Swift Kilo Install Error