Module Import alias Import alias Import alias Import alias identifier ImportFrom alias ImportFrom alias identifier Assign NameStore AttributeLoad NameLoad attr Assign NameStore AttributeLoad NameLoad attr Assign NameStore Dict NameLoad NameLoad Str Str FunctionDef arguments args NameParam defaults body Return Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return Call AttributeLoad NameLoad attr Str NameLoad decorator_list ClassDef bases NameLoad body Expr Str Assign NameStore NameLoad FunctionDef arguments args NameParam NameParam defaults body Expr Str decorator_list AttributeLoad NameLoad attr FunctionDef arguments args NameParam NameParam defaults body Expr Str Raise Call NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str decorator_list AttributeLoad NameLoad attr FunctionDef arguments args NameParam NameParam defaults body Expr Str Raise Call NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Str Pass decorator_list FunctionDef arguments args NameParam defaults body Expr Str Pass decorator_list FunctionDef arguments args NameParam defaults body Expr Str Pass decorator_list NameLoad FunctionDef arguments args NameParam defaults body Expr Str Expr Call AttributeLoad NameLoad attr TryFinally body Expr Yield finalbody Expr Call AttributeLoad NameLoad attr decorator_list AttributeLoad NameLoad attr FunctionDef arguments args NameParam NameParam NameParam defaults body Expr Str Raise Call NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Expr Str Raise Call NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam defaults NameLoad body Expr Str Raise Call NameLoad decorator_list decorator_list Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr ClassDef bases NameLoad body Expr Str FunctionDef arguments args NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam defaults body Return Dict decorator_list NameLoad FunctionDef arguments args NameParam NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Pass decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam defaults NameLoad body Pass decorator_list decorator_list
N/A N/A abc N/A contextlib N/A six N/A neutron.common.constants const neutron.common utils neutron.extensions portsecurity psec N/A INGRESS_DIRECTION N/A const INGRESS_DIRECTION N/A EGRESS_DIRECTION N/A const EGRESS_DIRECTION N/A DIRECTION_IP_PREFIX N/A INGRESS_DIRECTION EGRESS_DIRECTION source_ip_prefix dest_ip_prefix port_sec_enabled N/A N/A port N/A N/A N/A N/A N/A port get N/A psec PORTSECURITY True N/A load_firewall_driver_class N/A N/A driver N/A N/A N/A N/A N/A utils load_class_by_alias_or_classname neutron.agent.firewall_drivers driver N/A FirewallDriver N/A object N/A N/A Firewall Driver base class.

    Defines methods that any driver providing security groups
    and provider firewall functionality should implement.
    Note port attribute should have information of security group ids and
    security group rules.

    the dict of port should have
      device : interface name
      fixed_ips: ips of the device
      mac_address: mac_address of the device
      security_groups: [sgid, sgid]
      security_group_rules : [ rule, rule ]
      the rule must contain ethertype and direction
      the rule may contain security_group_id,
          protocol, port_min, port_max
          source_ip_prefix, source_port_min,
          source_port_max, dest_ip_prefix, and
          remote_group_id
      Note: source_group_ip in REST API should be converted by this rule
      if direction is ingress:
        remote_group_ip will be a source_ip_prefix
      if direction is egress:
        remote_group_ip will be a dest_ip_prefix
      Note: remote_group_id in REST API should be converted by this rule
      if direction is ingress:
        remote_group_id will be a list of source_ip_prefix
      if direction is egress:
        remote_group_id will be a list of dest_ip_prefix
      remote_group_id will also remaining membership update management
     N/A provides_arp_spoofing_protection False prepare_port_filter N/A N/A self port N/A N/A N/A Prepare filters for the port.

        This method should be called before the port is created.
         N/A N/A abc abstractmethod apply_port_filter N/A N/A self port N/A N/A N/A Apply port filter.

        Once this method returns, the port should be firewalled
        appropriately. This method should as far as possible be a
        no-op. It's vastly preferred to get everything set up in
        prepare_port_filter.
         N/A N/A NotImplementedError N/A update_port_filter N/A N/A self port N/A N/A N/A Refresh security group rules from data store

        Gets called when a port gets added to or removed from
        the security group the port is a member of or if the
        group gains or looses a rule.
         N/A N/A abc abstractmethod remove_port_filter N/A N/A self port N/A N/A N/A Stop filtering port. N/A N/A NotImplementedError N/A filter_defer_apply_on N/A N/A self N/A N/A N/A Defer application of filtering rule. N/A N/A filter_defer_apply_off N/A N/A self N/A N/A N/A Turn off deferral of rules and apply the rules now. N/A N/A ports N/A N/A self N/A N/A N/A Returns filtered ports. N/A N/A property defer_apply N/A N/A self N/A N/A N/A Defer apply context. N/A N/A N/A self filter_defer_apply_on N/A N/A N/A N/A N/A N/A N/A N/A self filter_defer_apply_off N/A N/A contextlib contextmanager update_security_group_members N/A N/A self sg_id ips N/A N/A N/A Update group members in a security group. N/A N/A NotImplementedError N/A update_security_group_rules N/A N/A self sg_id rules N/A N/A N/A Update rules in a security group. N/A N/A NotImplementedError N/A security_group_updated N/A N/A self action_type sec_group_ids device_id N/A None N/A N/A Called when a security group is updated.

        Note: This method needs to be implemented by the firewall drivers
        which use enhanced RPC for security_groups.
         N/A N/A NotImplementedError N/A N/A N/A N/A six add_metaclass N/A abc ABCMeta NoopFirewallDriver N/A FirewallDriver N/A N/A Noop Firewall Driver.

    Firewall driver which does nothing.
    This driver is for disabling the firewall functionality.
     prepare_port_filter N/A N/A self port N/A N/A N/A N/A apply_port_filter N/A N/A self port N/A N/A N/A N/A update_port_filter N/A N/A self port N/A N/A N/A N/A remove_port_filter N/A N/A self port N/A N/A N/A N/A filter_defer_apply_on N/A N/A self N/A N/A N/A N/A filter_defer_apply_off N/A N/A self N/A N/A N/A N/A ports N/A N/A self N/A N/A N/A N/A N/A property update_security_group_members N/A N/A self sg_id ips N/A N/A N/A N/A update_security_group_rules N/A N/A self sg_id rules N/A N/A N/A N/A security_group_updated N/A N/A self action_type sec_group_ids device_id N/A None N/A N/A N/A N/A