1 tosca_definitions_version: tosca_simple_yaml_1_0_0
5 - openecomp_heat_index:
6 file: openecomp-heat/_index.yml
7 - GlobalSubstitutionTypes:
8 file: GlobalSubstitutionTypesServiceTemplate.yaml
15 description: Policy Name
16 st_static_routes_list:
20 description: List of static routes enabled-disabled
25 description: service type
26 st_service_interface_type_list:
30 description: List of interface types
35 description: service mode
36 Cricket_OCS_protected_net_id:
40 description: Name of Cricket OCS network
45 description: Name of OAM network
50 description: Start of dst port
60 description: availability zone
61 service_instance_name:
65 description: Service instance name
70 description: Indicates whether service scaling is enabled
75 description: maximum number of firewall instances for scaling
80 description: Start of src port
81 service_policy_direction:
85 description: Direction of Policy
90 description: Name of service template
94 HSL_direct_net_gateway:
98 description: HSL (Logging) network gateway address
103 description: Name of the image
108 description: List of shared ip enabled-disabled
113 Cricket_OCS_direct_net_id:
117 description: Name of Cricket OCS network
122 description: Name of OAM network
131 description: End of src port
140 description: End of dst port
145 description: Name of the image
150 description: Name of HSL (Logging) network
155 description: HSL (Logging) network address (CIDR notation)
158 type: org.openecomp.resource.abstract.nodes.heat.service_template_1
165 get_input: availability_zone_1
168 service_template_filter:
169 substitute_service_template: OCS-fw_service_instance_1ServiceTemplate.yaml
171 get_input: max_num_fw_instances
172 scaling_enabled: false
178 - get_input: st_static_routes_list
182 - get_input: st_static_routes_list
186 - get_input: st_static_routes_list
190 - get_input: st_static_routes_list
193 service_template_name:
195 service_interface_type_list:
197 - management,left,right,other
201 - management,left,right,other
205 - management,left,right,other
209 - management,left,right,other
212 service_instance_name:
213 get_input: service_instance_name
216 get_input: oam_mgmt_net_0_id
218 get_input: Cricket_OCS_direct_net_id
219 - virtual_network: hsl_direct_net
228 get_input: oam_mgmt_net_1_id
233 - get_input: st_shared_ip_list
237 - get_input: st_shared_ip_list
241 - get_input: st_shared_ip_list
245 - get_input: st_shared_ip_list
250 capability: tosca.capabilities.network.Linkable
252 relationship: tosca.relationships.network.LinksTo
254 capability: tosca.capabilities.Node
256 relationship: tosca.relationships.DependsOn
258 type: org.openecomp.resource.abstract.nodes.heat.service_template_2
265 get_input: availability_zone_1
267 get_input: st_image_name
268 service_template_filter:
269 substitute_service_template: OCS-fw_service_instance_2ServiceTemplate.yaml
276 - get_input: st_static_routes_list
280 - get_input: st_static_routes_list
283 service_template_name:
285 service_interface_type_list:
287 - get_input: st_service_interface_type_list
291 - get_input: st_service_interface_type_list
294 service_instance_name:
295 get_input: service_instance_name
298 get_input: oam_mgmt_net_0_id
300 get_input: Cricket_OCS_direct_net_id
305 - get_input: st_shared_ip_list
309 - get_input: st_shared_ip_list
314 capability: tosca.capabilities.Node
316 relationship: tosca.relationships.DependsOn
318 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
321 get_input: HSL_direct_net_id
325 get_input: HSL_direct_net_cidr
327 get_input: HSL_direct_net_gateway
329 type: org.openecomp.resource.vfc.rules.nodes.heat.network.contrail.NetworkRules
335 get_input: start_src_ports
337 get_input: end_src_ports
342 - service_instance_name
348 get_input: Cricket_OCS_direct_net_id
351 get_input: start_dst_ports
353 get_input: end_dst_ports
356 get_input: Cricket_OCS_protected_net_id
358 get_input: service_policy_direction
360 get_input: service_policy_name
363 capability: tosca.capabilities.Node
364 node: service_instance_1
365 relationship: tosca.relationships.DependsOn
368 type: org.openecomp.groups.heat.HeatStack
370 heat_file: ../Artifacts/OCS-fw.yml
372 Based on the following reference for the HOT-DMZ-FW template: Version 3.5 8-10-2015 (Authors: Art Mishurov,am254u & Johhny Chen, jc3066) - HOT-DMZ-FW template that creates two DMZ networks (direct and protected) with a scaled out firewall service between the two.