The vmware_nsx.services.fwaas.nsx_v.edge_fwaas_driver Module

class vmware_nsx.services.fwaas.nsx_v.edge_fwaas_driver.EdgeFwaasDriver

Bases: vmware_nsx.services.fwaas.common.fwaas_mocks.FwaasDriverBase

NSX-V driver for Firewall As A Service - V1.

apply_default_policy(*args, **kwargs)

Apply the default policy (deny all).

The backend firewall always has this policy (=deny all) as default, so we only need to delete the current rules.

core_plugin

create_firewall(*args, **kwargs)

Create the Firewall with a given policy.

delete_firewall(*args, **kwargs)

Delete firewall.

Removes rules created by this instance from the backend firewall And add the default allow-external rule.

edge_manager

get_firewall_translated_rules(firewall)

should_apply_firewall_to_router(router_data, raise_exception=True)

Return True if the firewall rules should be added the router

Return False in those cases: - router without an external gateway (rule may be added later when

there is a gateway)

Raise an exception if the router is unsupported (and raise_exception is True): - shared router (not supported) - md proxy router (not supported)

update_firewall(*args, **kwargs)

Remove previous policy and apply the new policy.