
<html>

<head>

<meta http-equiv="content-type" content="text/html; charset=UTF-8">

</head>

<body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Hi,</p>

<br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Dnia czwartek, 29 czerwca 2023 19:08:30 CEST Karl Kloppenborg pisze:</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> Hi Team,</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> We have Ironic deployed and configured to deploy baremetal on vlans attached to the neutron routers of a tenancy/project.</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> However, when assigned a floating IP, there’s no firewall and the server is completely exposed.</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> I cannot seem to see any information on Ironic Firewall’s, how are others achieving this?</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> Any suggestions would be greatly appreciated.</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> Thanks,</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> Karl Kloppenborg.</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> Openstack-Helm Team.</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">> </p>

<br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">For firewall on the Neutron's router level there is neutron-fwaas project [1]. Did You checked that?</p>

<br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">[1] <a href="https://docs.openstack.org/neutron/latest/admin/fwaas-v2-scenario.html">https://docs.openstack.org/neutron/latest/admin/fwaas-v2-scenario.html</a></p>

<br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">-- </p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Slawek Kaplonski</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Principal Software Engineer</p>

<p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Red Hat</p>

</body>

</html>