| Elena Ezhova | 4967aed | 2017-08-24 18:08:13 +0400 | [diff] [blame] | 1 | --- |
| 2 | features: |
| 3 | - | |
| 4 | Add system level metadata class required to enable FWaaS in Neutron. |
| 5 | |
| 6 | The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to OpenStack |
| 7 | objects such as projects, routers, router ports, as well as to VM ports |
| 8 | and SFC ports in FWaaS V2. |
| 9 | |
| 10 | To enable FWaaS add the ``system.neutron.fwaas`` class to nodes with |
| 11 | control, gateway and, if the Neutron DVR feature is enabled, compute roles. |
| 12 | |
| 13 | By default the FWaaS V1 is installed. To install FWaaS V2 redefine the |
| 14 | ``fwaas_version`` parameter on the cluster level: |
| 15 | |
| 16 | .. code-block:: yaml |
| 17 | |
| 18 | fwaas_version: v2 |
| 19 | |