Page History

...

• New Columns
  • id (long): auto-generated id
  • uuid (string): auto-generated uuid
  • account_id: Account to which the ACL belongs
  • vpc_id: Id of the VPC
  • name: name of the network acl
  • description: network acl description

Changes to existing tables

1. firewall_rules

• New Columns
  • action (String) - Action allow/deny
  • number (long) - Rule priority
  • acl_id (long) - Id of the container, this ACL is part of

action, number, acl_id are mandatory for rule with purpose NetworkACL.

2. network_acl_item

• New columns
  • id
  • uuid
  • acl_id
  • action
  • number
  • traffic_type
  • start_port
  • end_port
  • protocol
  • state

Changes to existing tables

12. networks

• New Columns
  • acl_id (long) - network acl associated with this Tier

...

For each tier, a new network acl is created during the upgrade, All ACLItemss ACLItems that were assigned to this tier, will be part of the newly created network acl. If there are no ACLs for any tier, it'll be associated with the default ACL.

All existing rules in firewall_rules table of type NetworkACL will be moved to network_acl_item table and will have action "allow". Rule number will be sequentially assigned for all rules in each tier.