Skip to content

Commit b36a05a

Browse files
pcn-firewall: update documents to transparent cube
pcn-firewall is now transparent, update documentation to reflect it Signed-off-by: Mauricio Vasquez B <mauriciovasquezbernal@gmail.com>
1 parent 09d1bd5 commit b36a05a

1 file changed

Lines changed: 6 additions & 7 deletions

File tree

Documentation/services/pcn-firewall/firewall.rst

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
Firewall
22
========
33

4-
This service is a transparent firewall, it can be connected between two interfaces, and it may drop or forward each packet that matches one of the defined rules, based on the source and destination IPv4 addresses, level 4 protocol and ports, and TCP flags. Policy rules can include one or more of the above fields; if a given field is missing, its content is influent for the matching. *Packets that are not ip are forwarded without any check*.
4+
This service is a transparent firewall, it can be attached to a port or a netdev, and it may drop or forward each packet that matches one of the defined rules, based on the source and destination IPv4 addresses, level 4 protocol and ports, and TCP flags.
5+
Policy rules can include one or more of the above fields; if a given field is missing, its content is influent for the matching.
6+
*Packets that are not ip are forwarded without any check*.
57

68
Features
79
--------
@@ -24,13 +26,10 @@ Supported features:
2426
How to use
2527
----------
2628

27-
Ingress ad egress chains and ports
28-
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
29+
Ingress ad egress chains
30+
^^^^^^^^^^^^^^^^^^^^^^^^
2931

30-
The service is based on the ingress and egress chains and ports idea.
31-
The ``ingress port`` is by default the first port created, the ``egress port`` is by default the second port created. They can be changed respectively by issuing the commands ``polycubectl firewall fwname set ingress-port=portname`` and ``polycubectl firewall fwname set egress-port=portname``.
32-
The ``ingress chain`` processes all the traffic coming from the ingress port, and either drops it or forwards it to the egress port.
33-
The ``egress chain`` processes all the traffic coming from the egress port, and either drops it or forwards it to the ingress port.
32+
The service is based on the ingress and egress chains.
3433
Ingress and egress chains are independent and have two different policy sets.
3534

3635
Rule insertion

0 commit comments

Comments
 (0)