Nova provides a firewall per VM. The firewall policies are called "security groups". Security groups can be modified via the EC2 API.

The minimum level of support that we need for this is to be able to assign pre-existing security groups to VMs. Ideally, we'll have an interface to create, modify and delete security groups as well.

Version: unspecified
Severity: enhancement