<div dir="ltr">On Mon, Mar 4, 2013 at 4:28 AM, Dan Wendlandt <span dir="ltr"><<a href="mailto:dan@nicira.com" target="_blank">dan@nicira.com</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
I think you need to change the permissions on that review, as I cannot see it.</blockquote><div><br></div><div style>Sorry, I just have published the change.</div><div style>I tried the draft option (git review -D), but i shouldn't have done it. </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><br></div><div>also, please file a bug on this and i'll target it to RC1, as we need to make sure we make a decision on this before grizzly. </div>
</blockquote><div><br></div><div style>Filed: </div><div><a href="https://bugs.launchpad.net/quantum/+bug/1143283">https://bugs.launchpad.net/quantum/+bug/1143283</a><br></div><div><br></div><div style>Thanks,</div><div style>
Tomoe</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<span><font color="#888888">
<div><br></div><div>dan</div><br></font></span><div class="gmail_quote"><div><div>On Fri, Mar 1, 2013 at 3:27 AM, Tomoe Sugihara <span dir="ltr"><<a href="mailto:tomoe@midokura.com" target="_blank">tomoe@midokura.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div><div dir="ltr">Hi,<div class="gmail_extra">
<br><div class="gmail_quote"><div>On Wed, Feb 27, 2013 at 3:23 PM, Akihiro MOTOKI <span dir="ltr"><<a href="mailto:motoki@da.jp.nec.com" target="_blank">motoki@da.jp.nec.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Hi,<br>
<br>
It is worth discussed at this timing since it becomes difficult to change<br>
security groups models and default rules once Grizzly Quantum is shipped.<br>
<br>
Personally I prefer to symmetric models and semantics both for ingress and egress.<br>
It helps users understand the behaivor of security groups easily.<br>
(Honestly I was a little confused at first.)<br>
<br>
It looks reasonable to me that all egress traffic is dropped if there is<br>
truly no rules and the ALL ALLOW rule will be created automatically to<br>
egress rule when any security group is created. From users view there is<br>
no default behavior change.<br></blockquote><div><br></div></div><div>I have just uploaded my draft change to add explicit rules:</div><div><a href="https://review.openstack.org/#/c/23264/" target="_blank">https://review.openstack.org/#/c/23264/</a><br>
</div><div><br></div><div>I'd appreciate any feedback.</div><div><br></div><div>Thanks,</div><div>Tomoe</div><div><br></div><div><br></div><div><br></div></div></div></div>
<br></div></div><div>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></div></blockquote></div><div><div><br><br clear="all"><div><br></div>-- <br>~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>Dan Wendlandt <div>Nicira, Inc: <a href="http://www.nicira.com" target="_blank">www.nicira.com</a><br>
<div>twitter: danwendlandt<br>
~~~~~~~~~~~~~~~~~~~~~~~~~~~<br></div></div>
</div></div><br>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>