← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1628658] Re: [RFE] FWaaS integration with Congress for firewall policy validation

 

[Expired for neutron because there has been no activity for 60 days.]

** Changed in: neutron
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1628658

Title:
  [RFE] FWaaS integration with Congress for firewall policy validation

Status in neutron:
  Expired

Bug description:
  FWaaS is a repository for storing and applying security rules to
  permit or deny network access. Rules should be able to be validated
  and accepted or rejected based on security policy. Since Congress is
  the engine for policy validation, work to link FWaaS and Congress.

  Use case: For example as a company we may decided that connections
  from, say, North Korea (NK ip space, if there is such a thing) should
  not be allowed on port 3306. So we may have policy that will check all
  incoming firewall rules that may allow that and if they do reject
  them.

  This information has also been enqueued for consideration by Congress,
  see [1].

  [1] https://blueprints.launchpad.net/congress/+spec/congress-fwaas

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1628658/+subscriptions


References