Some drivers (libvirt, xen) still query the database and try to set up provider rules. However, there is no api for this feature as the mail thread you link points out and therefore no way to add/remove any rules. Due to this the setup of provider rules that is done today will effectively do nothing. An attempt at cleaning out all code related to this can be found here: https://review.openstack.org/184027 Hans On 2015-08-31 21:23, "Asselin, Ramy" <ramy.asselin at hp.com> wrote: >I saw this thread, “Undead DB objects: ProviderFirewallRule and InstanceGroupPolicy?” [1] > > >Seems to be in the process of getting removed from the DB, but are provider level firewalls still available? I still see a lot of code that indicates it does [2] > >I traced it to here, but not sure where the nova context is stored [3] > > >Ramy >Irc:asselin >[1] >http://lists.openstack.org/pipermail/openstack-dev/2014-November/050959.html <http://lists.openstack.org/pipermail/openstack-dev/2014-November/050959.html> >[2] >https://github.com/openstack/nova/search?l=python&q=provider&utf8=%E2%9C%93 <https://github.com/openstack/nova/search?l=python&q=provider&utf8=%E2%9C%93> >[3] >https://github.com/openstack/nova/blob/b0854ba0c697243aa3d91170d1a22896aed60e02/nova/conductor/rpcapi.py#L215 <https://github.com/openstack/nova/blob/b0854ba0c697243aa3d91170d1a22896aed60e02/nova/conductor/rpcapi.py#L215> > > > >