1 tosca_definitions_version: tosca_simple_yaml_1_0_0
5 - openecomp_heat_index:
6 file: openecomp-heat/_index.yml
7 - GlobalSubstitutionTypes:
8 file: GlobalSubstitutionTypesServiceTemplate.yaml
15 description: Policy Name
16 st_static_routes_list:
20 description: List of static routes enabled-disabled
25 description: service type
26 st_service_interface_type_list:
30 description: List of interface types
35 description: service mode
36 Cricket_OCS_protected_net_id:
40 description: Name of Cricket OCS network
45 description: Name of OAM network
50 description: Start of dst port
60 description: availability zone
61 service_instance_name:
65 description: Service instance name
70 description: Indicates whether service scaling is enabled
75 description: maximum number of firewall instances for scaling
80 description: Start of src port
81 service_policy_direction:
85 description: Direction of Policy
90 description: Name of service template
91 HSL_direct_net_gateway:
95 description: HSL (Logging) network gateway address
100 description: Name of the image
105 description: List of shared ip enabled-disabled
110 Cricket_OCS_direct_net_id:
114 description: Name of Cricket OCS network
119 description: Name of OAM network
128 description: End of src port
137 description: End of dst port
142 description: Name of the image
147 description: Name of HSL (Logging) network
152 description: HSL (Logging) network address (CIDR notation)
155 type: org.openecomp.resource.abstract.nodes.heat.service_template
162 get_input: availability_zone_1
165 service_template_filter:
166 substitute_service_template: OCS-fw_service_instance_1ServiceTemplate.yaml
169 get_input: st_scaling
175 - get_input: st_static_routes_list
179 - get_input: st_static_routes_list
183 - get_input: st_static_routes_list
187 - get_input: st_static_routes_list
190 service_template_name:
192 service_interface_type_list:
194 - management,left,right,other
198 - management,left,right,other
202 - management,left,right,other
206 - management,left,right,other
209 service_instance_name:
210 get_input: service_instance_name
213 get_input: oam_mgmt_net_0_id
215 get_input: Cricket_OCS_direct_net_id
216 - virtual_network: hsl_direct_net1
225 get_input: oam_mgmt_net_1_id
230 - get_input: st_shared_ip_list
234 - get_input: st_shared_ip_list
238 - get_input: st_shared_ip_list
242 - get_input: st_shared_ip_list
247 capability: tosca.capabilities.network.Linkable
248 node: hsl_direct_net1
249 relationship: tosca.relationships.network.LinksTo
251 capability: tosca.capabilities.Node
252 node: hsl_direct_net1
253 relationship: tosca.relationships.DependsOn
255 type: org.openecomp.resource.abstract.nodes.heat.service_template
262 get_input: availability_zone_1
265 service_template_filter:
266 substitute_service_template: OCS-fw_service_instance_2ServiceTemplate.yaml
268 get_input: max_num_fw_instances
270 get_input: st_scaling
276 - get_input: st_static_routes_list
280 - get_input: st_static_routes_list
284 - get_input: st_static_routes_list
288 - get_input: st_static_routes_list
291 service_template_name:
293 service_interface_type_list:
295 - management,left,right,other
299 - management,left,right,other
303 - management,left,right,other
307 - management,left,right,other
310 service_instance_name:
311 get_input: service_instance_name
314 get_input: oam_mgmt_net_0_id
316 get_input: Cricket_OCS_direct_net_id
317 - virtual_network: hsl_direct_net2
326 get_input: oam_mgmt_net_1_id
331 - get_input: st_shared_ip_list
335 - get_input: st_shared_ip_list
339 - get_input: st_shared_ip_list
343 - get_input: st_shared_ip_list
348 capability: tosca.capabilities.network.Linkable
349 node: hsl_direct_net2
350 relationship: tosca.relationships.network.LinksTo
352 capability: tosca.capabilities.Node
353 node: hsl_direct_net1
354 relationship: tosca.relationships.DependsOn
356 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
359 get_input: HSL_direct_net_id
363 get_input: HSL_direct_net_cidr
365 get_input: HSL_direct_net_gateway
367 type: org.openecomp.resource.vl.nodes.heat.network.contrail.VirtualNetwork
370 get_input: HSL_direct_net_id
372 type: org.openecomp.resource.vfc.rules.nodes.heat.network.contrail.NetworkRules
378 get_input: start_src_ports
380 get_input: end_src_ports
387 get_input: Cricket_OCS_direct_net_id
390 get_input: start_dst_ports
392 get_input: end_dst_ports
395 get_input: Cricket_OCS_protected_net_id
397 get_input: service_policy_direction
399 get_input: service_policy_name
402 capability: tosca.capabilities.Node
403 node: service_instance_1
404 relationship: tosca.relationships.DependsOn
407 type: org.openecomp.groups.heat.HeatStack
409 heat_file: ../Artifacts/OCS-fw.yml
411 Based on the following reference for the HOT-DMZ-FW template: Version 3.5 8-10-2015 (Authors: Art Mishurov,am254u & Johhny Chen, jc3066) - HOT-DMZ-FW template that creates two DMZ networks (direct and protected) with a scaled out firewall service between the two.