x/vmware-nsx
Code Issues Proposed changes

NSX-V| Fix FWaaS deployment on distributed router

Browse Source 
When deploying a firewall policy of a distributed router, sometimes the
rules are set on the tlr instead of the plr edge by mistake.

Change-Id: I2242394e773c1868a924fe81cc4669d3cf30dbb3
This commit is contained in:
Adit Sarfaty 2017-04-18 10:55:07 +03:00
parent 01d33ffa65
commit e45647357f
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
vmware_nsx/services/fwaas/nsx_v/edge_fwaas_driver.py
View File

@ -53,14 +53,16 @@ class EdgeFwaasDriver(fwaas_base.FwaasDriverBase):
lookup_id = None
router_id = router_info.router_id
if router_info.router.get('distributed'):
# Distributed router
# we need the plr edge id
lookup_id = edge_manager.get_plr_by_tlr_id(
context, router_id)
if router_info.router.get('router_type') == 'shared':
elif router_info.router.get('router_type') == 'shared':
# Shared router (currently not supported)
LOG.info("Cannot apply firewall to shared router %s",
router_id)
else:
# exclusive router
# Exclusive router
lookup_id = router_id
if lookup_id:
# look for the edge id in the DB