The ironic_inspector.pxe_filter.iptables Module

class ironic_inspector.pxe_filter.iptables.IptablesFilter[source]

Bases: ironic_inspector.pxe_filter.base.BaseFilter

A PXE boot filtering interface implementation.

init_filter(*args, **kwargs)[source]
reset()[source]
sync(*args, **kwargs)[source]

Sync firewall filter rules for introspection.

Gives access to PXE boot port for any machine, except for those, whose MAC is registered in Ironic and is not on introspection right now.

This function is called from both introspection initialization code and from periodic task. This function is supposed to be resistant to unexpected iptables state.

init() function must be called once before any call to this function. This function is using eventlet semaphore to serialize access from different green threads.

Parameters:ironic – an ironic client instance.
Returns:nothing.