Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refine Policy and PolicyRule Objects to Allow Duplicates with Variations #253

Open
jdrew82 opened this issue Jul 17, 2024 · 0 comments
Open
Assignees

Comments

@jdrew82
Copy link
Contributor

jdrew82 commented Jul 17, 2024

Environment

  • Nautobot version: 2.2.3
  • nautobot-firewall-models version: 2.0.3

Proposed Functionality

With the current implementation of the Policy model it enforces unique names of the Policy assuming that a policy is identical across a corporation's network. In reality this isn't accurate to how network policies can potentially be deployed, where there is a common set of rules for a policy but additional rules based upon some external factor such as Location, Tenant, Platform, or Role. Based upon these external factors I believe we should remove the uniqueness constraint on Policy name and add connections to these external factor objects and base uniqueness on those combinations.

Use Case

We could have a Management Policy for Datacenter Tenant that contains allow tcp 192.168.10.0/24 while the Management Policy for Backbone Tenant would have an allow tcp 172.16.10.0/24. This would also allow a Management Policy for Palo Alto to include a rule for access from Panorama.

@jdrew82 jdrew82 self-assigned this Jul 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant