Added fixed DHCP security rules, which will be added on a VM create.

[netvirt.git] / openstack / net-virt / src / main / java / org / opendaylight / ovsdb / openstack / netvirt / api / EgressAclProvider.java

diff --git a/openstack/net-virt/src/main/java/org/opendaylight/ovsdb/openstack/netvirt/api/EgressAclProvider.java b/openstack/net-virt/src/main/java/org/opendaylight/ovsdb/openstack/netvirt/api/EgressAclProvider.java
index 315a7846c9bd9dda50ca789cd9378b6ad3aafd5b..4747ad20e54da45e6e1a813a4888fed4f4ddb386 100644 (file)
--- a/openstack/net-virt/src/main/java/org/opendaylight/ovsdb/openstack/netvirt/api/EgressAclProvider.java
+++ b/openstack/net-virt/src/main/java/org/opendaylight/ovsdb/openstack/netvirt/api/EgressAclProvider.java
@@ -1,6 +1,9 @@
 package org.opendaylight.ovsdb.openstack.netvirt.api;
 
+import java.util.List;
+
 import org.opendaylight.neutron.spi.NeutronSecurityGroup;
+import org.opendaylight.neutron.spi.Neutron_IPs;
 
 /**
  *  This interface allows egress Port Security flows to be written to devices
@@ -18,4 +21,18 @@ public interface EgressAclProvider {
      */
     public void programPortSecurityACL(Long dpid, String segmentationId, String attachedMac,
                                        long localPort, NeutronSecurityGroup securityGroup);
+    /**
+     *  Program fixed egress ACL rules that will be associated with the VM port when a vm is spawned.
+     *
+     * @param dpid the dpid
+     * @param segmentationId the segmentation id
+     * @param attachedMac the attached mac
+     * @param localPort the local port
+     * @param srcAddressList the list of source ip address assigned to vm
+     * @param isLastPortinBridge is this the last port in the bridge
+     * @param isComputePort indicates whether this port is a compute port or not
+     * @param write is this flow writing or deleting
+     */
+    public void programFixedSecurityACL(Long dpid, String segmentationId,String attachedMac,
+            long localPort, List<Neutron_IPs> srcAddressList, boolean isLastPortinBridge, boolean isComputePort, boolean write);
 }