mirror of https://github.com/apache/cloudstack.git
8f8ad3f38e
This patch adds a network plugin to support Palo Alto Networks firewall (their appliance and their VM series firewall). More information in the FS: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Palo+Alto+Firewall+Integration Features supported are: - List/Add/Delete Palo Alto service provider - List/Add/Delete Palo Alto network service offering - List/Add/Delete Palo Alto network with above service offering - Add instance to the new network (creates the public IP and private gateway/cidr on the PA as well as the source nat rule) - List/Add/Delete Ingress Firewall rule - List/Add/Delete Egress Firewall rule - List/Add/Delete Port Forwarding rule - List/Add/Delete Static Nat rule - Supports Palo Alto Networks 'Log Forwarding' profile globally per device (additional docs to come) - Supports Palo Alto Networks 'Security Profile Groups' functionality globally per device (additional docs to come) Knowns limitations: - Only supports one public IP range in CloudStack. - Currently not verifying SSL certificates when creating a connection between CloudStack and the Palo Alto Networks firewall. - Currently not tracking usage on Public IPs. Signed-off-by: Sheng Yang <sheng.yang@citrix.com> |
||
|---|---|---|
| .. | ||
| catalina.policy.in | ||
| catalina.properties.in | ||
| classpath.conf.in | ||
| cloudmanagementserver.keystore | ||
| commands.properties.in | ||
| context.xml.in | ||
| db.properties.in | ||
| ehcache.xml.in | ||
| environment.properties.in | ||
| log4j-cloud.xml.in | ||
| logging.properties.in | ||
| server-nonssl.xml.in | ||
| server-ssl.xml.in | ||
| tomcat-users.xml.in | ||
| tomcat6-nonssl.conf.in | ||
| tomcat6-ssl.conf.in | ||
| web.xml.in | ||