)]}'
{"doc/networking-guide/source/fwaas.rst":[{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, router ports, or"},{"line_number":9,"context_line":"(anticipated in Ocata) VM ports."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"},{"line_number":12,"context_line":"policy and a firewall rule. A policy is an ordered collection of rules; a rule"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d826ae15","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":32},"updated":"2016-11-08 12:23:27.000000000","message":"I would pull this out as a note. So, have \"objects such as projects, routers and router ports.\n.. note::\n   We anticipate this to expend to VM ports in the Ocata cycle.\"","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, router ports, or"},{"line_number":9,"context_line":"(anticipated in Ocata) VM ports."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"},{"line_number":12,"context_line":"policy and a firewall rule. A policy is an ordered collection of rules; a rule"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_28a03743","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":32},"in_reply_to":"9a629dbe_d826ae15","updated":"2016-11-08 14:34:26.000000000","message":"Done.  Much better!","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":9,"context_line":"(anticipated in Ocata) VM ports."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"},{"line_number":12,"context_line":"policy and a firewall rule. A policy is an ordered collection of rules; a rule"},{"line_number":13,"context_line":"specifies a collection of attributes (such as port ranges, protocol, and IP"},{"line_number":14,"context_line":"addresses) that constitute match criteria and an action to take (allow or deny)"},{"line_number":15,"context_line":"on matched traffic."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_7865a243","line":12,"range":{"start_line":12,"start_character":70,"end_line":12,"end_character":72},"updated":"2016-11-08 12:23:27.000000000","message":"avoid using semi-colon. Separate the sentences please.\n\"A policy is an ordered collection of rules, these rules specify a collection of attributes...\"","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":9,"context_line":"(anticipated in Ocata) VM ports."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"},{"line_number":12,"context_line":"policy and a firewall rule. A policy is an ordered collection of rules; a rule"},{"line_number":13,"context_line":"specifies a collection of attributes (such as port ranges, protocol, and IP"},{"line_number":14,"context_line":"addresses) that constitute match criteria and an action to take (allow or deny)"},{"line_number":15,"context_line":"on matched traffic."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_68b14f8f","line":12,"range":{"start_line":12,"start_character":70,"end_line":12,"end_character":72},"in_reply_to":"9a629dbe_7865a243","updated":"2016-11-08 14:34:26.000000000","message":"Done though I\u0027m using a period to avoid a run-on.  Also I\u0027m using the singular, \"rule,\" to avoid ambiguity.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":14,"context_line":"addresses) that constitute match criteria and an action to take (allow or deny)"},{"line_number":15,"context_line":"on matched traffic."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_7304e514","line":17,"range":{"start_line":17,"start_character":0,"end_line":17,"end_character":65},"updated":"2016-11-08 12:23:27.000000000","message":"This can be attached to the para above.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":14,"context_line":"addresses) that constitute match criteria and an action to take (allow or deny)"},{"line_number":15,"context_line":"on matched traffic."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_0867f325","line":17,"range":{"start_line":17,"start_character":0,"end_line":17,"end_character":65},"in_reply_to":"9a629dbe_7304e514","updated":"2016-11-08 14:34:26.000000000","message":"Done","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"},{"line_number":21,"context_line":"driver implements firewall rules using flow entries in flow tables. A"},{"line_number":22,"context_line":"Cisco firewall driver manipulates NSX devices."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f33715e1","line":19,"range":{"start_line":19,"start_character":42,"end_line":19,"end_character":70},"updated":"2016-11-08 12:23:27.000000000","message":"\"...various ways, depending...\" OR \"...various ways dependent on the driver used.\"","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"},{"line_number":21,"context_line":"driver implements firewall rules using flow entries in flow tables. A"},{"line_number":22,"context_line":"Cisco firewall driver manipulates NSX devices."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_936ed9c7","line":19,"range":{"start_line":19,"start_character":72,"end_line":19,"end_character":74},"updated":"2016-11-08 12:23:27.000000000","message":"For example, an iptable driver *","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"},{"line_number":21,"context_line":"driver implements firewall rules using flow entries in flow tables. A"},{"line_number":22,"context_line":"Cisco firewall driver manipulates NSX devices."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_2845976f","line":19,"range":{"start_line":19,"start_character":72,"end_line":19,"end_character":74},"in_reply_to":"9a629dbe_936ed9c7","updated":"2016-11-08 14:34:26.000000000","message":"Done","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"A policy can be made public, so it can be shared across projects."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Firewalls are implemented in various ways depending on the driver used. An"},{"line_number":20,"context_line":"iptables driver implements firewalls using iptable rules. An OpenVSwitch"},{"line_number":21,"context_line":"driver implements firewall rules using flow entries in flow tables. A"},{"line_number":22,"context_line":"Cisco firewall driver manipulates NSX devices."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_c8541b23","line":19,"range":{"start_line":19,"start_character":42,"end_line":19,"end_character":70},"in_reply_to":"9a629dbe_f33715e1","updated":"2016-11-08 14:34:26.000000000","message":"Done","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":25,"context_line":"--------"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"The original FWaaS implementation, v1, provides perimeter protection. Here, a"},{"line_number":28,"context_line":"firewall is applied at the project level: all project routers are covered by"},{"line_number":29,"context_line":"the policy associated with that firewall so that traffic entering and leaving"},{"line_number":30,"context_line":"project networks is vetted."},{"line_number":31,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_3360adce","line":28,"range":{"start_line":28,"start_character":40,"end_line":28,"end_character":41},"updated":"2016-11-08 12:23:27.000000000","message":"project level. All project routers ... *","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":25,"context_line":"--------"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"The original FWaaS implementation, v1, provides perimeter protection. Here, a"},{"line_number":28,"context_line":"firewall is applied at the project level: all project routers are covered by"},{"line_number":29,"context_line":"the policy associated with that firewall so that traffic entering and leaving"},{"line_number":30,"context_line":"project networks is vetted."},{"line_number":31,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_1303a40e","line":28,"range":{"start_line":28,"start_character":40,"end_line":28,"end_character":41},"in_reply_to":"9a629dbe_3360adce","updated":"2016-11-08 14:34:26.000000000","message":"It turns out I\u0027ve had to rewrite this paragraph in light of Sridar\u0027s comment below.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":6995,"name":"Sridar Kandaswamy","email":"skandasw@yahoo.com","username":"skandasw"},"change_message_id":"3daa135b5b492fe28a148e12ee63caafd3997893","unresolved":false,"context_lines":[{"line_number":27,"context_line":"The original FWaaS implementation, v1, provides perimeter protection. Here, a"},{"line_number":28,"context_line":"firewall is applied at the project level: all project routers are covered by"},{"line_number":29,"context_line":"the policy associated with that firewall so that traffic entering and leaving"},{"line_number":30,"context_line":"project networks is vetted."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"The following diagram depicts FWaaS v1 protection. It illustrates the flow of"},{"line_number":33,"context_line":"ingress and egress traffic for the VM2 instance:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_bc5bc453","line":30,"updated":"2016-11-08 01:32:59.000000000","message":"This was the case in the very first implementation, after supporting the Router Insertion extension, the firewall can be enabled on a subset of routers in a project. But on a router where it is enabled, it is applied on all the internal ports.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":27,"context_line":"The original FWaaS implementation, v1, provides perimeter protection. Here, a"},{"line_number":28,"context_line":"firewall is applied at the project level: all project routers are covered by"},{"line_number":29,"context_line":"the policy associated with that firewall so that traffic entering and leaving"},{"line_number":30,"context_line":"project networks is vetted."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"The following diagram depicts FWaaS v1 protection. It illustrates the flow of"},{"line_number":33,"context_line":"ingress and egress traffic for the VM2 instance:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b31bd81a","line":30,"in_reply_to":"9a629dbe_bc5bc453","updated":"2016-11-08 14:34:26.000000000","message":"Okay, check out what I\u0027ve done.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":38,"context_line":"--------"},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"The newer FWaaS implementation, v2, provides a much more granular service."},{"line_number":41,"context_line":"The nomenclature of a \"firewall\" has been replaced with a \"firewall"},{"line_number":42,"context_line":"group\" to indicate that a firewall consists of two policies: an ingress policy"},{"line_number":43,"context_line":"and an egress policy. A firewall group is applied not at the project level"},{"line_number":44,"context_line":"(all routers in a project) but at the port level. Currently, router ports can"},{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_73eea523","line":42,"range":{"start_line":41,"start_character":22,"end_line":42,"end_character":6},"updated":"2016-11-08 12:23:27.000000000","message":"remove the scare quotes","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":38,"context_line":"--------"},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"The newer FWaaS implementation, v2, provides a much more granular service."},{"line_number":41,"context_line":"The nomenclature of a \"firewall\" has been replaced with a \"firewall"},{"line_number":42,"context_line":"group\" to indicate that a firewall consists of two policies: an ingress policy"},{"line_number":43,"context_line":"and an egress policy. A firewall group is applied not at the project level"},{"line_number":44,"context_line":"(all routers in a project) but at the port level. Currently, router ports can"},{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b34f58bc","line":42,"range":{"start_line":41,"start_character":22,"end_line":42,"end_character":6},"in_reply_to":"9a629dbe_73eea523","updated":"2016-11-08 14:34:26.000000000","message":"Done.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"13e170fc8703861fb209f46021a96df9efeabd3d","unresolved":false,"context_lines":[{"line_number":42,"context_line":"group\" to indicate that a firewall consists of two policies: an ingress policy"},{"line_number":43,"context_line":"and an egress policy. A firewall group is applied not at the project level"},{"line_number":44,"context_line":"(all routers in a project) but at the port level. Currently, router ports can"},{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"In FWaaS v2, each project has a default firewall. This is to say that all ports"},{"line_number":48,"context_line":"on all routers in a given project will have a default firewall."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f3dab577","line":45,"range":{"start_line":45,"start_character":12,"end_line":45,"end_character":14},"updated":"2016-11-08 12:23:27.000000000","message":"avoid. Restructure to phrase without :) \"Currently, router ports can be specified and for Ocata, VM ports can also be specified.\"","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":42,"context_line":"group\" to indicate that a firewall consists of two policies: an ingress policy"},{"line_number":43,"context_line":"and an egress policy. A firewall group is applied not at the project level"},{"line_number":44,"context_line":"(all routers in a project) but at the port level. Currently, router ports can"},{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"In FWaaS v2, each project has a default firewall. This is to say that all ports"},{"line_number":48,"context_line":"on all routers in a given project will have a default firewall."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f34ab082","line":45,"range":{"start_line":45,"start_character":12,"end_line":45,"end_character":14},"in_reply_to":"9a629dbe_f3dab577","updated":"2016-11-08 14:34:26.000000000","message":"Done.\n\nIs it part of OpenStack documentation guidelines that colons and semicolons are to be avoided?  I find them really handy!  For instance on line 28 above I would have preferred to retain that colon since the thought that follows it directly explains the thought the precedes it.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":6995,"name":"Sridar Kandaswamy","email":"skandasw@yahoo.com","username":"skandasw"},"change_message_id":"3daa135b5b492fe28a148e12ee63caafd3997893","unresolved":false,"context_lines":[{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"In FWaaS v2, each project has a default firewall. This is to say that all ports"},{"line_number":48,"context_line":"on all routers in a given project will have a default firewall."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"FWaaS v1 versus v2"},{"line_number":51,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_1c31100c","line":48,"updated":"2016-11-08 01:32:59.000000000","message":"Unless i am mistaken, we plan to enable this along with the L2 support. So we can update the documentation after the code is in. May be i am misunderstanding something here.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"d42b35256851ff77284bbf29a90c0d4c43f5dae1","unresolved":false,"context_lines":[{"line_number":45,"context_line":"be specified; for Ocata, VM ports can also be specified."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"In FWaaS v2, each project has a default firewall. This is to say that all ports"},{"line_number":48,"context_line":"on all routers in a given project will have a default firewall."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"FWaaS v1 versus v2"},{"line_number":51,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_aeba8f21","line":48,"in_reply_to":"9a629dbe_1c31100c","updated":"2016-11-08 14:34:26.000000000","message":"Done.  Thank you--Nate and I weren\u0027t sure about this.","commit_id":"d031e7a553b904d34f17850de9eb0ffad256f97d"},{"author":{"_account_id":14947,"name":"Maria Zlatkova","email":"mzlatkova@mirantis.com","username":"mzlatkova"},"change_message_id":"f760581b4f67d45faaffbeaed9551a2872b17d0c","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Firewall-as-a-Service (FWaaS)"},{"line_number":2,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"Overview"},{"line_number":5,"context_line":"--------"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, and router ports."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_dc1e9462","line":5,"range":{"start_line":4,"start_character":0,"end_line":5,"end_character":8},"updated":"2016-11-08 15:56:50.000000000","message":"This one can be removed. Please see http://docs.openstack.org/contributor-guide/writing-style/headings.html#general-guidelines","commit_id":"6ad8380dbf3f430d2afa66eb4fae75d72458d139"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"cff56a62f56069cd1da66d0b44e42f8303731759","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Firewall-as-a-Service (FWaaS)"},{"line_number":2,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"Overview"},{"line_number":5,"context_line":"--------"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, and router ports."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_7724c3ae","line":5,"range":{"start_line":4,"start_character":0,"end_line":5,"end_character":8},"in_reply_to":"9a629dbe_dc1e9462","updated":"2016-11-08 16:23:24.000000000","message":"Done","commit_id":"6ad8380dbf3f430d2afa66eb4fae75d72458d139"},{"author":{"_account_id":14947,"name":"Maria Zlatkova","email":"mzlatkova@mirantis.com","username":"mzlatkova"},"change_message_id":"f760581b4f67d45faaffbeaed9551a2872b17d0c","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, and router ports."},{"line_number":9,"context_line":"-- note::"},{"line_number":10,"context_line":"We anticipate this to expand to VM ports in the Ocata cycle."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_e14575b3","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":3},"updated":"2016-11-08 15:56:50.000000000","message":"just .. note::\nOtherwise it\u0027s broken.","commit_id":"6ad8380dbf3f430d2afa66eb4fae75d72458d139"},{"author":{"_account_id":17711,"name":"Margaret Frances","email":"margaret_frances@cable.comcast.com","username":"margaret-frances"},"change_message_id":"cff56a62f56069cd1da66d0b44e42f8303731759","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The Firewall-as-a-Service (FWaaS) plug-in applies firewalls to"},{"line_number":8,"context_line":"OpenStack objects such as projects, routers, and router ports."},{"line_number":9,"context_line":"-- note::"},{"line_number":10,"context_line":"We anticipate this to expand to VM ports in the Ocata cycle."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"The central concepts with OpenStack firewalls are the notions of a firewall"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_973b17d1","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":3},"in_reply_to":"9a629dbe_e14575b3","updated":"2016-11-08 16:23:24.000000000","message":"Done","commit_id":"6ad8380dbf3f430d2afa66eb4fae75d72458d139"}]}