#113: Ship with firewall on by default
-----------------------+---------------------
Reporter: dustymabe | Owner:
Type: task | Status: new
Priority: normal | Milestone: Future
Component: --- | Resolution:
Keywords: meeting |
-----------------------+---------------------
Comment (by ryansb):
Agreed, the target use cases (GCE, EC2, OpenStack, whatever) all have
network security external to the instance. Anyone who needs the firewall
active can, as you said, use cloud-init or chef/puppet/ansible/salt.
For casual cloud users, having an instance firewall deny them after
they've set up security groups to allow the traffic would probably be
confusing if they assume security groups "are" the firewall.
--
Ticket URL: <https://fedorahosted.org/cloud/ticket/113#comment:2>
cloud <https://fedorahosted.org/cloud>
Fedora Cloud Working Group Ticketing System
_______________________________________________
cloud mailing list
cloud@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/cloud
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
