[openstack-dev] [neutron] - Changing the Neutron default security group rules

Ihar Hrachyshka ihrachys at redhat.com
Thu Mar 3 09:48:36 UTC 2016


Kevin Benton <kevin at benton.pub> wrote:

>
> * Neutron cannot be trusted to do what it says it's doing with the  
> security groups API so users want to orchestrate firewalls directly on  
> their instances.

If that’s really a reason for someone, then they should just use ’noop'  
firewall_driver. Or port_security port extension if they need more control.

Ihar



More information about the OpenStack-dev mailing list