yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #63929
[Bug 1628658] Re: [RFE] FWaaS integration with Congress for firewall policy validation
[Expired for neutron because there has been no activity for 60 days.]
** Changed in: neutron
Status: Incomplete => Expired
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1628658
Title:
[RFE] FWaaS integration with Congress for firewall policy validation
Status in neutron:
Expired
Bug description:
FWaaS is a repository for storing and applying security rules to
permit or deny network access. Rules should be able to be validated
and accepted or rejected based on security policy. Since Congress is
the engine for policy validation, work to link FWaaS and Congress.
Use case: For example as a company we may decided that connections
from, say, North Korea (NK ip space, if there is such a thing) should
not be allowed on port 3306. So we may have policy that will check all
incoming firewall rules that may allow that and if they do reject
them.
This information has also been enqueued for consideration by Congress,
see [1].
[1] https://blueprints.launchpad.net/congress/+spec/congress-fwaas
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1628658/+subscriptions
References