<div dir="ltr"><div>The following is the code, there is no configuration item to configure the default rules</div><div><br></div><div>for ethertype in ext_sg.sg_supported_ethertypes:</div><div>                if default_sg:</div><div>                    # Allow intercommunication</div><div>                    ingress_rule = sg_models.SecurityGroupRule(</div><div>                        id=uuidutils.generate_uuid(), tenant_id=tenant_id,</div><div>                        security_group=security_group_db,</div><div>                        direction='ingress',</div><div>                        ethertype=ethertype,</div><div>                        source_group=security_group_db)</div><div>                    context.session.add(ingress_rule)</div><div><br></div><div>                egress_rule = sg_models.SecurityGroupRule(</div><div>                    id=uuidutils.generate_uuid(), tenant_id=tenant_id,</div><div>                    security_group=security_group_db,</div><div>                    direction='egress',</div><div>                    ethertype=ethertype)</div><div>                context.session.add(egress_rule)</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 9, 2017 at 3:16 PM, Paul Schlacter <span dir="ltr"><<a href="mailto:wlfightup@gmail.com" target="_blank">wlfightup@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">    I see the neutron code, which added the default rules to write very rigid, only for ipv4 ipv6 plus two rules. What if I want to customize the default rules?</div>
</blockquote></div><br></div>