csit/variables/gbp/gbpsxp-renderer-policy.json

   1 {
   2     "renderer-policy": {
   3         "configuration": {
   4             "endpoints": {
   5                 "address-endpoint-with-location": [
   6                     {
   7                         "absolute-location": {
   8                             "external-node-connector": "/a:network-topology/a:topology[a:topology-id='topology-netconf']/a:node[a:node-id='ios-xe-mock-1']/a:termination-point[a:tp-id='12345']",
   9                             "external-node-mount-point": "/network-topology:network-topology/network-topology:topology[network-topology:topology-id='topology-netconf']/network-topology:node[network-topology:node-id='ios-xe-mock-1']"
  10                         },
  11                         "address": "10.0.35.2/24",
  12                         "address-type": "l2-l3-forwarding:ip-prefix-type",
  13                         "condition": [
  14                             "chain"
  15                         ],
  16                         "context-id": "l3-context-vrf-red",
  17                         "context-type": "l2-l3-forwarding:l3-context",
  18                         "endpoint-group": [
  19                             "clients"
  20                         ],
  21                         "network-containment": {
  22                             "network-domain-id": "subnet-10.0.35.0/24",
  23                             "network-domain-type": "l2-l3-forwarding:subnet"
  24                         },
  25                         "renderer-name": "ios-xe-renderer",
  26                         "tenant": "tenant-red",
  27                         "timestamp": 1465570272304
  28                     },
  29                     {
  30                         "absolute-location": {
  31                             "external-node-connector": "/a:network-topology/a:topology[a:topology-id='topology-netconf']/a:node[a:node-id='ios-xe-mock-2']/a:termination-point[a:tp-id='54321']",
  32                             "external-node-mount-point": "/network-topology:network-topology/network-topology:topology[network-topology:topology-id='topology-netconf']/network-topology:node[network-topology:node-id='ios-xe-mock-2']"
  33                         },
  34                         "address": "10.0.36.2/24",
  35                         "address-type": "l2-l3-forwarding:ip-prefix-type",
  36                         "condition": [
  37                             "chain"
  38                         ],
  39                         "context-id": "l3-context-vrf-red",
  40                         "context-type": "l2-l3-forwarding:l3-context",
  41                         "endpoint-group": [
  42                             "webservers"
  43                         ],
  44                         "network-containment": {
  45                             "network-domain-id": "subnet-10.0.36.0/24",
  46                             "network-domain-type": "l2-l3-forwarding:subnet"
  47                         },
  48                         "renderer-name": "ios-xe-renderer",
  49                         "tenant": "tenant-red",
  50                         "timestamp": 1465570272438
  51                     }
  52                 ]
  53             },
  54             "renderer-endpoints": {
  55                 "renderer-endpoint": [
  56                     {
  57                         "address": "10.0.35.2/24",
  58                         "address-type": "l2-l3-forwarding:ip-prefix-type",
  59                         "context-id": "l3-context-vrf-red",
  60                         "context-type": "l2-l3-forwarding:l3-context",
  61                         "peer-endpoint": [
  62                             {
  63                                 "address": "10.0.36.2/24",
  64                                 "address-type": "l2-l3-forwarding:ip-prefix-type",
  65                                 "context-id": "l3-context-vrf-red",
  66                                 "context-type": "l2-l3-forwarding:l3-context",
  67                                 "rule-group-with-renderer-endpoint-participation": [
  68                                     {
  69                                         "contract-id": "icmp-http-contract",
  70                                         "renderer-endpoint-participation": "CONSUMER",
  71                                         "subject-name": "allow-icmp-subject",
  72                                         "tenant-id": "tenant-red"
  73                                     },
  74                                     {
  75                                         "contract-id": "icmp-http-contract",
  76                                         "renderer-endpoint-participation": "CONSUMER",
  77                                         "subject-name": "allow-http-subject",
  78                                         "tenant-id": "tenant-red"
  79                                     }
  80                                 ]
  81                             }
  82                         ]
  83                     },
  84                     {
  85                         "address": "10.0.36.2/24",
  86                         "address-type": "l2-l3-forwarding:ip-prefix-type",
  87                         "context-id": "l3-context-vrf-red",
  88                         "context-type": "l2-l3-forwarding:l3-context",
  89                         "peer-endpoint": [
  90                             {
  91                                 "address": "10.0.35.2/24",
  92                                 "address-type": "l2-l3-forwarding:ip-prefix-type",
  93                                 "context-id": "l3-context-vrf-red",
  94                                 "context-type": "l2-l3-forwarding:l3-context",
  95                                 "rule-group-with-renderer-endpoint-participation": [
  96                                     {
  97                                         "contract-id": "icmp-http-contract",
  98                                         "renderer-endpoint-participation": "PROVIDER",
  99                                         "subject-name": "allow-icmp-subject",
 100                                         "tenant-id": "tenant-red"
 101                                     },
 102                                     {
 103                                         "contract-id": "icmp-http-contract",
 104                                         "renderer-endpoint-participation": "PROVIDER",
 105                                         "subject-name": "allow-http-subject",
 106                                         "tenant-id": "tenant-red"
 107                                     }
 108                                 ]
 109                             }
 110                         ]
 111                     }
 112                 ]
 113             },
 114             "renderer-forwarding": {
 115                 "renderer-forwarding-by-tenant": [
 116                     {
 117                         "renderer-forwarding-context": [
 118                             {
 119                                 "context-id": "flood-domain-1",
 120                                 "context-type": "l2-l3-forwarding:l2-flood-domain",
 121                                 "parent": {
 122                                     "context-id": "bridge-domain1",
 123                                     "context-type": "l2-l3-forwarding:l2-bridge-domain"
 124                                 }
 125                             },
 126                             {
 127                                 "context-id": "flood-domain1",
 128                                 "context-type": "l2-l3-forwarding:l2-flood-domain",
 129                                 "parent": {
 130                                     "context-id": "bridge-domain1",
 131                                     "context-type": "l2-l3-forwarding:l2-bridge-domain"
 132                                 }
 133                             },
 134                             {
 135                                 "context-id": "bridge-domain1",
 136                                 "context-type": "l2-l3-forwarding:l2-bridge-domain",
 137                                 "parent": {
 138                                     "context-id": "l3-context-vrf-red",
 139                                     "context-type": "l2-l3-forwarding:l3-context"
 140                                 }
 141                             },
 142                             {
 143                                 "context-id": "l3-context-vrf-red",
 144                                 "context-type": "l2-l3-forwarding:l3-context"
 145                             }
 146                         ],
 147                         "renderer-network-domain": [
 148                             {
 149                                 "l2-l3-forwarding:subnet": {
 150                                     "ip-prefix": "10.0.35.0/24",
 151                                     "virtual-router-ip": "10.0.35.1"
 152                                 },
 153                                 "network-domain-id": "subnet-10.0.35.0/24",
 154                                 "network-domain-type": "l2-l3-forwarding:subnet",
 155                                 "parent": {
 156                                     "context-id": "flood-domain-1",
 157                                     "context-type": "l2-l3-forwarding:l2-flood-domain"
 158                                 }
 159                             },
 160                             {
 161                                 "l2-l3-forwarding:subnet": {
 162                                     "ip-prefix": "10.0.36.0/24",
 163                                     "virtual-router-ip": "10.0.36.1"
 164                                 },
 165                                 "network-domain-id": "subnet-10.0.36.0/24",
 166                                 "network-domain-type": "l2-l3-forwarding:subnet",
 167                                 "parent": {
 168                                     "context-id": "flood-domain1",
 169                                     "context-type": "l2-l3-forwarding:l2-flood-domain"
 170                                 }
 171                             }
 172                         ],
 173                         "tenant-id": "tenant-red"
 174                     }
 175                 ]
 176             },
 177             "rule-groups": {
 178                 "rule-group": [
 179                     {
 180                         "contract-id": "icmp-http-contract",
 181                         "resolved-rule": [
 182                             {
 183                                 "action": [
 184                                     {
 185                                         "action-definition-id": "Action-Chain",
 186                                         "name": "allow1",
 187                                         "order": 0,
 188                                         "parameter-value": [
 189                                             {
 190                                                 "name": "sfc-chain-name",
 191                                                 "string-value": "SFCGBP"
 192                                             }
 193                                         ]
 194                                     }
 195                                 ],
 196                                 "classifier": [
 197                                     {
 198                                         "classifier-definition-id": "Classifier-IP-Protocol",
 199                                         "connection-tracking": "normal",
 200                                         "direction": "out",
 201                                         "name": "icmp-out",
 202                                         "parameter-value": [
 203                                             {
 204                                                 "int-value": 1,
 205                                                 "name": "proto"
 206                                             }
 207                                         ]
 208                                     },
 209                                     {
 210                                         "classifier-definition-id": "Classifier-IP-Protocol",
 211                                         "connection-tracking": "normal",
 212                                         "direction": "in",
 213                                         "name": "icmp-in",
 214                                         "parameter-value": [
 215                                             {
 216                                                 "int-value": 1,
 217                                                 "name": "proto"
 218                                             }
 219                                         ]
 220                                     }
 221                                 ],
 222                                 "name": "allow-icmp-rule",
 223                                 "order": 0
 224                             }
 225                         ],
 226                         "subject-name": "allow-icmp-subject",
 227                         "tenant-id": "tenant-red"
 228                     },
 229                     {
 230                         "contract-id": "icmp-http-contract",
 231                         "resolved-rule": [
 232                             {
 233                                 "action": [
 234                                     {
 235                                         "action-definition-id": "Action-Chain",
 236                                         "name": "allow1",
 237                                         "order": 0,
 238                                         "parameter-value": [
 239                                             {
 240                                                 "name": "sfc-chain-name",
 241                                                 "string-value": "SFCGBP"
 242                                             }
 243                                         ]
 244                                     }
 245                                 ],
 246                                 "classifier": [
 247                                     {
 248                                         "classifier-definition-id": "Classifier-L4",
 249                                         "connection-tracking": "normal",
 250                                         "direction": "out",
 251                                         "name": "http-src",
 252                                         "parameter-value": [
 253                                             {
 254                                                 "int-value": 80,
 255                                                 "name": "sourceport"
 256                                             },
 257                                             {
 258                                                 "int-value": 6,
 259                                                 "name": "proto"
 260                                             }
 261                                         ]
 262                                     },
 263                                     {
 264                                         "classifier-definition-id": "Classifier-L4",
 265                                         "connection-tracking": "normal",
 266                                         "direction": "in",
 267                                         "name": "http-dest",
 268                                         "parameter-value": [
 269                                             {
 270                                                 "int-value": 6,
 271                                                 "name": "proto"
 272                                             },
 273                                             {
 274                                                 "int-value": 80,
 275                                                 "name": "destport"
 276                                             }
 277                                         ]
 278                                     }
 279                                 ],
 280                                 "name": "allow-http-rule",
 281                                 "order": 0
 282                             }
 283                         ],
 284                         "subject-name": "allow-http-subject",
 285                         "tenant-id": "tenant-red"
 286                     }
 287                 ]
 288             }
 289         },
 290         "version": 1
 291     }
 292 }