neutron-fwaas policies

The following is an overview of all available policies in neutron-fwaas. For a sample configuration file, refer to Sample Neutron FWaaS Policy File.

neutron-fwaas

shared_firewall_groups

Default:

field:firewall_groups:shared=True

Definition of shared firewall groups

create_firewall_group

Default:

rule:regular_user

Operations:

• POST /fwaas/firewall_groups

Create a firewall group

update_firewall_group

Default:

rule:admin_or_owner

Operations:

• PUT /fwaas/firewall_groups/{id}

Update a firewall group

delete_firewall_group

Default:

rule:admin_or_owner

Operations:

• DELETE /fwaas/firewall_groups/{id}

Delete a firewall group

create_firewall_group:shared

Default:

rule:admin_only

Operations:

• POST /fwaas/firewall_groups

Create a shared firewall group

update_firewall_group:shared

Default:

rule:admin_only

Operations:

• PUT /fwaas/firewall_groups/{id}

Update shared attribute of a firewall group

delete_firewall_group:shared

Default:

rule:admin_only

Operations:

• DELETE /fwaas/firewall_groups/{id}

Delete a shared firewall group

get_firewall_group

Default:

rule:admin_or_owner or rule:shared_firewall_groups

Operations:

• GET /fwaas/firewall_groups

• GET /fwaas/firewall_groups/{id}

Get firewall groups

shared_firewall_policies

Default:

field:firewall_policies:shared=True

Definition of shared firewall policies

create_firewall_policy

Default:

rule:regular_user

Operations:

• POST /fwaas/firewall_policies

Create a firewall policy

update_firewall_policy

Default:

rule:admin_or_owner

Operations:

• PUT /fwaas/firewall_policies/{id}

Update a firewall policy

delete_firewall_policy

Default:

rule:admin_or_owner

Operations:

• DELETE /fwaas/firewall_policies/{id}

Delete a firewall policy

create_firewall_policy:shared

Default:

rule:admin_only

Operations:

• POST /fwaas/firewall_policies

Create a shared firewall policy

update_firewall_policy:shared

Default:

rule:admin_only

Operations:

• PUT /fwaas/firewall_policies/{id}

Update shared attribute of a firewall policy

delete_firewall_policy:shared

Default:

rule:admin_only

Operations:

• DELETE /fwaas/firewall_policies/{id}

Delete a shread firewall policy

get_firewall_policy

Default:

rule:admin_or_owner or rule:shared_firewall_policies

Operations:

• GET /fwaas/firewall_policies

• GET /fwaas/firewall_policies/{id}

Get firewall policies

shared_firewall_rules

Default:

field:firewall_rules:shared=True

Definition of shared firewall rules

create_firewall_rule

Default:

rule:regular_user

Operations:

• POST /fwaas/firewall_rules

Create a firewall rule

update_firewall_rule

Default:

rule:admin_or_owner

Operations:

• PUT /fwaas/firewall_rules/{id}

Update a firewall rule

delete_firewall_rule

Default:

rule:admin_or_owner

Operations:

• DELETE /fwaas/firewall_rules/{id}

Delete a firewall rule

create_firewall_rule:shared

Default:

rule:admin_only

Operations:

• POST /fwaas/firewall_rules

Create a shared firewall rule

update_firewall_rule:shared

Default:

rule:admin_only

Operations:

• PUT /fwaas/firewall_rules/{id}

Update shared attribute of a firewall rule

delete_firewall_rule:shared

Default:

rule:admin_only

Operations:

• DELETE /fwaas/firewall_rules/{id}

Delete a shread firewall rule

get_firewall_rule

Default:

rule:admin_or_owner or rule:shared_firewall_rules

Operations:

• GET /fwaas/firewall_rules

• GET /fwaas/firewall_rules/{id}

Get firewall rules

insert_rule

Default:

rule:admin_or_owner

Operations:

• PUT /fwaas/firewall_policies/{id}/insert_rule

Insert rule into a firewall policy

remove_rule

Default:

rule:admin_or_owner

Operations:

• PUT /fwaas/firewall_policies/{id}/remove_rule

Remove rule from a firewall policy