<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<div><font face="Calibri,sans-serif">I've made an attempt at mapping out exactly how Neutron Advanced Services </font><span style="font-family: Calibri, sans-serif; ">will communicate with Barbican to retrieve Certificate/Key info for TLS </span><span style="font-family: Calibri, sans-serif; ">purposes.
These diagrams have gone through several revisions, but are still an </span><font face="Calibri,sans-serif">early draft of the interactions: </font><a href="http://imgur.com/a/4u6Oz">http://imgur.com/a/4u6Oz</a></div>
<div><br>
</div>
<div>Note that these diagrams use Neutron-LBaaS as the example use-case, but the flow would be essentially the same for any service (FWaaS, VPNaaS, etc). The code that handles this will be in neutron/common/ so that it can be used by any extension. There is
a WIP CR here (though right now it doesn't look anything like the final version, including very badly named and organized functions): <a href="https://review.openstack.org/#/c/123492/">https://review.openstack.org/#/c/123492/</a></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Hopefully this is not a new concept, as I believe we agreed during the Atlanta </font><span style="font-family: Calibri, sans-serif; ">summit that using Barbican to store TLS cert/key data was the appropriate </span><span style="font-family: Calibri, sans-serif; ">path
forward for Neutron (and other OpenStack projects).</span></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">I assume there may be other teams investigating very similar integration </font><span style="font-family: Calibri, sans-serif; ">schemes as well, so if anyone has comments or suggestions, I'd love to hear </span><span style="font-family: Calibri, sans-serif; ">them.</span></div>
</div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Thanks,</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; ">
<div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>--Adam Harwell</div>
<div><br>
</div>
</div>
<div><a href="https://keybase.io/rm_you">https://keybase.io/rm_you</a></div>
<div><br>
</div>
</div>
</body>
</html>