Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-26733

[neutron-fwaas] The FWaaS plugin is always loading the ``IptablesLoggingDriver``

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • openstack-neutron
    • None
    • Moderate

      The ``FirewallPluginV2`` class is registering the logging driver [1] when is instantiated. The ``logapi`` register always loads the ``IptablesLoggingDriver``, regardless of ``fwaas_db`` driver loaded.

      If Neutron is using ML2/OVN only, that means the neutron-fwaas project won't need the L3 agent. In that case it is not needed:

      • To load the IPtables driver
      • To register the RPC callbacks.
      • To enable the RPC support (``requires_rpc``) in the new driver.

      [1]https://github.com/openstack/neutron-fwaas/blob/2ffcdc83d4eee3636d8cbf373d3d5d38587f7596/neutron_fwaas/services/firewall/fwaas_plugin_v2.py#L80

              skaplons@redhat.com Slawomir Kaplonski
              skaplons@redhat.com Slawomir Kaplonski
              rhos-dfg-networking-squad-neutron
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: