Chapter 8. Protecting Instances on the Network
Neutron includes two methods of providing network-level security to instances. The first method is using security groups that leverage iptables rules to filter traffic on the compute node hosting the instance. The second method is a feature known as Firewall-as-a-Service (FWaaS) that provides filtering at the perimeter of the network on a Neutron router. First introduced in the Havana release of OpenStack as a technical preview, FWaaS serves as a complement to Neutron security groups, not a replacement.
In this chapter, we will discuss some fundamental security features of Neutron, such as:
- Managing security groups
- Demonstrating how security groups leverage iptables
- Managing Neutron firewalls
- Demonstrating ...
Get Learning OpenStack Networking (Neutron) now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
