Skip to main content

Firewalls

Check the firewall requirements​

  • The Networking API lists the FWaaS v2 extension, alias fwaas_v2, in every region with the network service enabled.
  • Firewall groups accept router interface ports. OSIE applies a group to router interfaces only, so the cloud has to filter at its routers.

To check for the extension:

openstack extension list --network -c Alias -f value | grep fwaas_v2

The command prints fwaas_v2 on a cloud with the extension, and nothing on a cloud without it. It shows what the API offers, so test a firewall group with traffic to see that the routers filter.

Use firewalls in OSIE​

Where the extension is listed, customers build firewalls from rules, policies and groups in the client portal. The Firewalls tab appears in the regions set under Services and regions. You charge for firewalls through their resource types.

Configure firewalls in OpenStack​

OpenStack documents the extension in the Neutron guide, Firewall-as-a-Service (FWaaS), and in the Networking API reference.