root / doc / build / html / index.html @ 6de88ee1
History | View | Annotate | Download (6.8 kB)
| 1 | 6de88ee1 | Stauros Kroustouris | |
|---|---|---|---|
| 2 | 6de88ee1 | Stauros Kroustouris | |
| 3 | 6de88ee1 | Stauros Kroustouris | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
| 4 | 6de88ee1 | Stauros Kroustouris | "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
| 5 | 6de88ee1 | Stauros Kroustouris | |
| 6 | 6de88ee1 | Stauros Kroustouris | |
| 7 | 6de88ee1 | Stauros Kroustouris | <html xmlns="http://www.w3.org/1999/xhtml"> |
| 8 | 6de88ee1 | Stauros Kroustouris | <head>
|
| 9 | 6de88ee1 | Stauros Kroustouris | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> |
| 10 | 6de88ee1 | Stauros Kroustouris | |
| 11 | 6de88ee1 | Stauros Kroustouris | <title>Firewall on Demand — fod 1.1.0 documentation</title> |
| 12 | 6de88ee1 | Stauros Kroustouris | |
| 13 | 6de88ee1 | Stauros Kroustouris | <link rel="stylesheet" href="_static/default.css" type="text/css" /> |
| 14 | 6de88ee1 | Stauros Kroustouris | <link rel="stylesheet" href="_static/pygments.css" type="text/css" /> |
| 15 | 6de88ee1 | Stauros Kroustouris | |
| 16 | 6de88ee1 | Stauros Kroustouris | <script type="text/javascript"> |
| 17 | 6de88ee1 | Stauros Kroustouris | var DOCUMENTATION_OPTIONS = {
|
| 18 | 6de88ee1 | Stauros Kroustouris | URL_ROOT: '',
|
| 19 | 6de88ee1 | Stauros Kroustouris | VERSION: '1.1.0',
|
| 20 | 6de88ee1 | Stauros Kroustouris | COLLAPSE_INDEX: false,
|
| 21 | 6de88ee1 | Stauros Kroustouris | FILE_SUFFIX: '.html',
|
| 22 | 6de88ee1 | Stauros Kroustouris | HAS_SOURCE: true
|
| 23 | 6de88ee1 | Stauros Kroustouris | };
|
| 24 | 6de88ee1 | Stauros Kroustouris | </script>
|
| 25 | 6de88ee1 | Stauros Kroustouris | <script type="text/javascript" src="_static/jquery.js"></script> |
| 26 | 6de88ee1 | Stauros Kroustouris | <script type="text/javascript" src="_static/underscore.js"></script> |
| 27 | 6de88ee1 | Stauros Kroustouris | <script type="text/javascript" src="_static/doctools.js"></script> |
| 28 | 6de88ee1 | Stauros Kroustouris | <link rel="top" title="fod 1.1.0 documentation" href="#" /> |
| 29 | 6de88ee1 | Stauros Kroustouris | <link rel="next" title="Installation" href="install.html" /> |
| 30 | 6de88ee1 | Stauros Kroustouris | </head>
|
| 31 | 6de88ee1 | Stauros Kroustouris | <body>
|
| 32 | 6de88ee1 | Stauros Kroustouris | <div class="related"> |
| 33 | 6de88ee1 | Stauros Kroustouris | <h3>Navigation</h3> |
| 34 | 6de88ee1 | Stauros Kroustouris | <ul>
|
| 35 | 6de88ee1 | Stauros Kroustouris | <li class="right" style="margin-right: 10px"> |
| 36 | 6de88ee1 | Stauros Kroustouris | <a href="genindex.html" title="General Index" |
| 37 | 6de88ee1 | Stauros Kroustouris | accesskey="I">index</a></li> |
| 38 | 6de88ee1 | Stauros Kroustouris | <li class="right" > |
| 39 | 6de88ee1 | Stauros Kroustouris | <a href="install.html" title="Installation" |
| 40 | 6de88ee1 | Stauros Kroustouris | accesskey="N">next</a> |</li> |
| 41 | 6de88ee1 | Stauros Kroustouris | <li><a href="#">fod 1.1.0 documentation</a> »</li> |
| 42 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 43 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 44 | 6de88ee1 | Stauros Kroustouris | |
| 45 | 6de88ee1 | Stauros Kroustouris | <div class="document"> |
| 46 | 6de88ee1 | Stauros Kroustouris | <div class="documentwrapper"> |
| 47 | 6de88ee1 | Stauros Kroustouris | <div class="bodywrapper"> |
| 48 | 6de88ee1 | Stauros Kroustouris | <div class="body"> |
| 49 | 6de88ee1 | Stauros Kroustouris | |
| 50 | 6de88ee1 | Stauros Kroustouris | <div class="section" id="firewall-on-demand"> |
| 51 | 6de88ee1 | Stauros Kroustouris | <h1>Firewall on Demand<a class="headerlink" href="#firewall-on-demand" title="Permalink to this headline">¶</a></h1> |
| 52 | 6de88ee1 | Stauros Kroustouris | <div class="section" id="description"> |
| 53 | 6de88ee1 | Stauros Kroustouris | <h2>Description<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2> |
| 54 | 6de88ee1 | Stauros Kroustouris | <p>Firewall on Demand applies, via Netconf, flow rules to a network device. These rules are then propagated via e-bgp to peering routers. Each user is authenticated against shibboleth. Authorization is performed via a combination of a Shibboleth attribute and the peer network address range that the user originates from.
|
| 55 | 6de88ee1 | Stauros Kroustouris | FoD is meant to operate over this architecture:</p>
|
| 56 | 6de88ee1 | Stauros Kroustouris | <div class="highlight-python"><pre>+-----------+ +------------+ +------------+ |
| 57 | 6de88ee1 | Stauros Kroustouris | | FoD | NETCONF | flowspec | ebgp | router | |
| 58 | 6de88ee1 | Stauros Kroustouris | | web app +----------> device +--------> | |
| 59 | 6de88ee1 | Stauros Kroustouris | +-----------+ +------+-----+ +------------+ |
| 60 | 6de88ee1 | Stauros Kroustouris | | ebgp |
| 61 | 6de88ee1 | Stauros Kroustouris | | |
| 62 | 6de88ee1 | Stauros Kroustouris | +------v-----+ |
| 63 | 6de88ee1 | Stauros Kroustouris | | router | |
| 64 | 6de88ee1 | Stauros Kroustouris | | | |
| 65 | 6de88ee1 | Stauros Kroustouris | +------------+</pre>
|
| 66 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 67 | 6de88ee1 | Stauros Kroustouris | <p>NETCONF is chosen as the mgmt protocol to apply rules to a single flowspec capable device. Rules are then propagated via igbp to all flowspec capable routers. Of course FoD could apply rules directly (via NETCONF always) to a router and then ibgp would do the rest.
|
| 68 | 6de88ee1 | Stauros Kroustouris | In GRNET’s case the flowspec capable device is an EX4200.</p> |
| 69 | 6de88ee1 | Stauros Kroustouris | <div class="admonition attention"> |
| 70 | 6de88ee1 | Stauros Kroustouris | <p class="first admonition-title">Attention</p> |
| 71 | 6de88ee1 | Stauros Kroustouris | <p class="last">Make sure your FoD server has ssh access to your flowspec device.</p> |
| 72 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 73 | 6de88ee1 | Stauros Kroustouris | <div class="admonition attention"> |
| 74 | 6de88ee1 | Stauros Kroustouris | <p class="first admonition-title">Attention</p> |
| 75 | 6de88ee1 | Stauros Kroustouris | <p class="last">Installation instructions assume a clean Debian Wheezy with Django 1.4</p> |
| 76 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 77 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 78 | 6de88ee1 | Stauros Kroustouris | <div class="section" id="contact"> |
| 79 | 6de88ee1 | Stauros Kroustouris | <h2>Contact<a class="headerlink" href="#contact" title="Permalink to this headline">¶</a></h2> |
| 80 | 6de88ee1 | Stauros Kroustouris | <p>You can find more about FoD or raise your issues at <a class="reference external" href="https://code.grnet.gr/projects/flowspy">GRNET FoD repository</a>.</p> |
| 81 | 6de88ee1 | Stauros Kroustouris | <p>You can contact us directly at leopoul{at}noc[dot]grnet(.)gr</p> |
| 82 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 83 | 6de88ee1 | Stauros Kroustouris | <div class="section" id="install"> |
| 84 | 6de88ee1 | Stauros Kroustouris | <h2>Install<a class="headerlink" href="#install" title="Permalink to this headline">¶</a></h2> |
| 85 | 6de88ee1 | Stauros Kroustouris | <div class="toctree-wrapper compound"> |
| 86 | 6de88ee1 | Stauros Kroustouris | <ul>
|
| 87 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l1"><a class="reference internal" href="install.html">Installation</a><ul> |
| 88 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#debian-wheezy-x64-django-1-4-x">Debian Wheezy (x64) - Django 1.4.x</a></li> |
| 89 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#application-configuration">Application configuration</a></li> |
| 90 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#system-configuration">System configuration</a></li> |
| 91 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#propagate-the-flatpages">Propagate the flatpages</a></li> |
| 92 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#testing-the-platform">Testing the platform</a></li> |
| 93 | 6de88ee1 | Stauros Kroustouris | <li class="toctree-l2"><a class="reference internal" href="install.html#branding">Branding</a></li> |
| 94 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 95 | 6de88ee1 | Stauros Kroustouris | </li>
|
| 96 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 97 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 98 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 99 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 100 | 6de88ee1 | Stauros Kroustouris | |
| 101 | 6de88ee1 | Stauros Kroustouris | |
| 102 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 103 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 104 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 105 | 6de88ee1 | Stauros Kroustouris | <div class="sphinxsidebar"> |
| 106 | 6de88ee1 | Stauros Kroustouris | <div class="sphinxsidebarwrapper"> |
| 107 | 6de88ee1 | Stauros Kroustouris | <h3><a href="#">Table Of Contents</a></h3> |
| 108 | 6de88ee1 | Stauros Kroustouris | <ul>
|
| 109 | 6de88ee1 | Stauros Kroustouris | <li><a class="reference internal" href="#">Firewall on Demand</a><ul> |
| 110 | 6de88ee1 | Stauros Kroustouris | <li><a class="reference internal" href="#description">Description</a></li> |
| 111 | 6de88ee1 | Stauros Kroustouris | <li><a class="reference internal" href="#contact">Contact</a></li> |
| 112 | 6de88ee1 | Stauros Kroustouris | <li><a class="reference internal" href="#install">Install</a><ul> |
| 113 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 114 | 6de88ee1 | Stauros Kroustouris | </li>
|
| 115 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 116 | 6de88ee1 | Stauros Kroustouris | </li>
|
| 117 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 118 | 6de88ee1 | Stauros Kroustouris | |
| 119 | 6de88ee1 | Stauros Kroustouris | <h4>Next topic</h4> |
| 120 | 6de88ee1 | Stauros Kroustouris | <p class="topless"><a href="install.html" |
| 121 | 6de88ee1 | Stauros Kroustouris | title="next chapter">Installation</a></p> |
| 122 | 6de88ee1 | Stauros Kroustouris | <h3>This Page</h3> |
| 123 | 6de88ee1 | Stauros Kroustouris | <ul class="this-page-menu"> |
| 124 | 6de88ee1 | Stauros Kroustouris | <li><a href="_sources/index.txt" |
| 125 | 6de88ee1 | Stauros Kroustouris | rel="nofollow">Show Source</a></li> |
| 126 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 127 | 6de88ee1 | Stauros Kroustouris | <div id="searchbox" style="display: none"> |
| 128 | 6de88ee1 | Stauros Kroustouris | <h3>Quick search</h3> |
| 129 | 6de88ee1 | Stauros Kroustouris | <form class="search" action="search.html" method="get"> |
| 130 | 6de88ee1 | Stauros Kroustouris | <input type="text" name="q" /> |
| 131 | 6de88ee1 | Stauros Kroustouris | <input type="submit" value="Go" /> |
| 132 | 6de88ee1 | Stauros Kroustouris | <input type="hidden" name="check_keywords" value="yes" /> |
| 133 | 6de88ee1 | Stauros Kroustouris | <input type="hidden" name="area" value="default" /> |
| 134 | 6de88ee1 | Stauros Kroustouris | </form>
|
| 135 | 6de88ee1 | Stauros Kroustouris | <p class="searchtip" style="font-size: 90%"> |
| 136 | 6de88ee1 | Stauros Kroustouris | Enter search terms or a module, class or function name. |
| 137 | 6de88ee1 | Stauros Kroustouris | </p>
|
| 138 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 139 | 6de88ee1 | Stauros Kroustouris | <script type="text/javascript">$('#searchbox').show(0);</script> |
| 140 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 141 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 142 | 6de88ee1 | Stauros Kroustouris | <div class="clearer"></div> |
| 143 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 144 | 6de88ee1 | Stauros Kroustouris | <div class="related"> |
| 145 | 6de88ee1 | Stauros Kroustouris | <h3>Navigation</h3> |
| 146 | 6de88ee1 | Stauros Kroustouris | <ul>
|
| 147 | 6de88ee1 | Stauros Kroustouris | <li class="right" style="margin-right: 10px"> |
| 148 | 6de88ee1 | Stauros Kroustouris | <a href="genindex.html" title="General Index" |
| 149 | 6de88ee1 | Stauros Kroustouris | >index</a></li> |
| 150 | 6de88ee1 | Stauros Kroustouris | <li class="right" > |
| 151 | 6de88ee1 | Stauros Kroustouris | <a href="install.html" title="Installation" |
| 152 | 6de88ee1 | Stauros Kroustouris | >next</a> |</li> |
| 153 | 6de88ee1 | Stauros Kroustouris | <li><a href="#">fod 1.1.0 documentation</a> »</li> |
| 154 | 6de88ee1 | Stauros Kroustouris | </ul>
|
| 155 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 156 | 6de88ee1 | Stauros Kroustouris | <div class="footer"> |
| 157 | 6de88ee1 | Stauros Kroustouris | © Copyright 2014, Leonidas Poulopoulos (@leopoul), GRNET S.A.
|
| 158 | 6de88ee1 | Stauros Kroustouris | Created using <a href="http://sphinx.pocoo.org/">Sphinx</a> 1.1.3. |
| 159 | 6de88ee1 | Stauros Kroustouris | </div>
|
| 160 | 6de88ee1 | Stauros Kroustouris | </body>
|
| 161 | 6de88ee1 | Stauros Kroustouris | </html> |