Ask Your Question
1

what's the difference between "security groups" and "firewall as a services"?

asked 2015-02-26 07:38:14 -0600

ccebrian gravatar image

why to use both? what about perfomances and scalibilty in each one?

edit retag flag offensive close merge delete

Comments

After working with both (from dashboard) they seem very similar (to me) in features (and similar to IPtables). So what are the differences in: - how they work - the features (I mean what I can do with one and I cannot with the other one) - performances and scalability in each one - Why use both?

ccebrian gravatar imageccebrian ( 2015-02-26 07:39:01 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
1

answered 2015-02-26 08:05:30 -0600

updated 2015-02-26 08:06:09 -0600

In my experience, Firewall as a service(FWaaS) has control over router ports but security group brings controler over instance ports directly.

Also security group is Backward compatible with Nova security groups (EC2 & existing nova deployments)

See all snapshots here. These are snapshot of FWaaS service, and how it works.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2015-02-26 07:38:14 -0600

Seen: 2,451 times

Last updated: Feb 26 '15