Added fixed DHCP security rules, which will be added on a VM create.
[netvirt.git] / openstack / net-virt / src / main / java / org / opendaylight / ovsdb / openstack / netvirt / api / EgressAclProvider.java
index 14d0e6ae037dd8a809b292c7f0fee04cc942692c..4747ad20e54da45e6e1a813a4888fed4f4ddb386 100644 (file)
@@ -1,7 +1,9 @@
 package org.opendaylight.ovsdb.openstack.netvirt.api;
 
+import java.util.List;
+
 import org.opendaylight.neutron.spi.NeutronSecurityGroup;
-import org.opendaylight.controller.sal.core.Node;
+import org.opendaylight.neutron.spi.Neutron_IPs;
 
 /**
  *  This interface allows egress Port Security flows to be written to devices
@@ -11,13 +13,26 @@ public interface EgressAclProvider {
     /**
      * Program port security ACL.
      *
-     * @param node the node
      * @param dpid the dpid
      * @param segmentationId the segmentation id
      * @param attachedMac the attached mac
      * @param localPort the local port
      * @param securityGroup the security group
      */
-    public void programPortSecurityACL(Node node, Long dpid, String segmentationId, String attachedMac,
+    public void programPortSecurityACL(Long dpid, String segmentationId, String attachedMac,
                                        long localPort, NeutronSecurityGroup securityGroup);
+    /**
+     *  Program fixed egress ACL rules that will be associated with the VM port when a vm is spawned.
+     *
+     * @param dpid the dpid
+     * @param segmentationId the segmentation id
+     * @param attachedMac the attached mac
+     * @param localPort the local port
+     * @param srcAddressList the list of source ip address assigned to vm
+     * @param isLastPortinBridge is this the last port in the bridge
+     * @param isComputePort indicates whether this port is a compute port or not
+     * @param write is this flow writing or deleting
+     */
+    public void programFixedSecurityACL(Long dpid, String segmentationId,String attachedMac,
+            long localPort, List<Neutron_IPs> srcAddressList, boolean isLastPortinBridge, boolean isComputePort, boolean write);
 }