2 * Copyright (c) 2014, 2015 Red Hat, Inc. and others. All rights reserved.
4 * This program and the accompanying materials are made available under the
5 * terms of the Eclipse Public License v1.0 which accompanies this distribution,
6 * and is available at http://www.eclipse.org/legal/epl-v10.html
9 package org.opendaylight.ovsdb.openstack.netvirt.api;
11 import org.opendaylight.ovsdb.openstack.netvirt.translator.NeutronSecurityGroup;
12 import org.opendaylight.ovsdb.openstack.netvirt.translator.NeutronSecurityRule;
13 import org.opendaylight.ovsdb.openstack.netvirt.translator.Neutron_IPs;
15 import java.util.List;
18 * This interface allows egress Port Security flows to be written to devices.
20 public interface EgressAclProvider {
23 * Program port security Group.
25 * @param dpid the dpid
26 * @param segmentationId the segmentation id
27 * @param attachedMac the attached mac
28 * @param localPort the local port
29 * @param securityGroup the security group
30 * @param portUuid the uuid of the port.
31 * @param write is this flow write or delete
33 void programPortSecurityGroup(Long dpid, String segmentationId, String attachedMac,
34 long localPort, NeutronSecurityGroup securityGroup,
35 String portUuid, boolean write);
37 * Program port security rule.
39 * @param dpid the dpid
40 * @param segmentationId the segmentation id
41 * @param attachedMac the attached mac
42 * @param localPort the local port
43 * @param portSecurityRule the security rule
44 * @param vmIp the ip of the remote vm if it has a remote security group.
45 * @param write is this flow write or delete
47 public void programPortSecurityRule(Long dpid, String segmentationId, String attachedMac,
48 long localPort, NeutronSecurityRule portSecurityRule,
49 Neutron_IPs vmIp, boolean write) ;
51 * Program fixed egress security group rules that will be associated with the VM port when a vm is spawned.
53 * @param dpid the dpid
54 * @param segmentationId the segmentation id
55 * @param attachedMac the attached mac
56 * @param localPort the local port
57 * @param srcAddressList the list of source ip address assigned to vm
58 * @param isLastPortinBridge is this the last port in the bridge
59 * @param isComputePort indicates whether this port is a compute port or not
60 * @param write is this flow writing or deleting
62 void programFixedSecurityGroup(Long dpid, String segmentationId,String attachedMac, long localPort,
63 List<Neutron_IPs> srcAddressList, boolean isLastPortinBridge,
64 boolean isComputePort, boolean write);