Ask Your Question

what's the difference between "security groups" and "firewall as a services"?

asked 2015-02-26 07:38:14 -0500

ccebrian gravatar image

why to use both? what about perfomances and scalibilty in each one?

edit retag flag offensive close merge delete


After working with both (from dashboard) they seem very similar (to me) in features (and similar to IPtables). So what are the differences in: - how they work - the features (I mean what I can do with one and I cannot with the other one) - performances and scalability in each one - Why use both?

ccebrian gravatar imageccebrian ( 2015-02-26 07:39:01 -0500 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2015-02-26 08:05:30 -0500

updated 2015-02-26 08:06:09 -0500

In my experience, Firewall as a service(FWaaS) has control over router ports but security group brings controler over instance ports directly.

Also security group is Backward compatible with Nova security groups (EC2 & existing nova deployments)

See all snapshots here. These are snapshot of FWaaS service, and how it works.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools


Asked: 2015-02-26 07:38:14 -0500

Seen: 2,919 times

Last updated: Feb 26 '15