Hi, I think the neutron fwaas can meet your requirement. Try "neutron help | grep firewall" and [1] to see more. [1] https://wiki.openstack.org/wiki/Neutron/FWaaS HongHui Xiao(肖宏辉) From: "Rui Mao" <maorui2k at 163.com> To: <openstack at lists.openstack.org> Date: 05/10/2016 09:22 Subject: [Openstack] Control network access between tenant networks in same neutron L3 router? For example, tenant network A/B/C/D connect to same neutron L3 router. A/B/C can communicate with D, but A/B/C cannot access each others. Is this possible? Any performance issue should be considered? Best regards, Rui Mao _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack at lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack