Open Stack

 First of all I 'd like to wish to each and everyone of you happy new 
 year!

 Then I 'd like to know if there is a way to control the outbound 
 (egress) traffic directly from within Openstack
 for a group of VMs rather than modifying the iptables for each one of 
 them.

 It would be great if there is a way to group the VMs on a "security" 
 group (like the way it's done for the inbound traffic on security 
 groups).

 If not is there any other way to achieve this? I am thinking of setting 
 up a pfSense firewall and pass all traffic from there. Would that work? 
 Any other ideas/suggestions??


 Best regards,


 George