See the Networking API definition https://developer.openstack.org/api-ref/networking/v2/index.html?expanded=insert-rule-into-a-firewall-policy-detail#insert-rule-into-a-firewall-policy It says "If both insert_before and insert_after are not set, the new firewall_rule_id is inserted at the top of the policy." I think this is the intended behavior. 2017-08-22 18:50 GMT+09:00 田明明 <tianming20052004 at 163.com>: > Has this referenced any firewall production or it is a bug because it will cause original rules re-ordered every time? > > 发自我的 iPhone > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev