Skip to content

Implement a new Firewall Agent controllable through RESTCONF/OpenConfig

Proposers

  • Lluis Gifre (CTTC)

Description

Implement a new Firewall Agent controllable through RESTCONF/OpenConfig. It should be controlled through TeraFlowSDN and enable permitting/blocking traffic flows on machines and VMs. The backend used is NFTables.

Demo or definition of done

Be able to deploy a service and control through TeraFlowSDN the ingress SDN flows towards that service.

Acknowledgements

This work is funded by the European Commission through the HORIZON-JU-SNS-2022 ACROSS project with Grant Agreement number 101097122.

References

  1. RESTCONF Protocol, IETF RFC 8040
  2. OpenConfig Data Model
  3. NetFilter/IPTables - NFTables