andrijapanicsb commented on PR #13684: URL: https://github.com/apache/cloudstack/pull/13684#issuecomment-5196892561
@weizhouapache thing that there is a misunderstanding here: from what I know (worth testing....) the default DENY rule applies only until someone adds a very first egress rule (any) - after that - if they want to allow just some outgoing/egress traffic and notall, there is no more "default/failback" DENY rule exising, it has to be explicitly added. So - any automoation that ever adds ANY egress rule to a Isolated network - will continue to work (assuming the default ALLOW also stops being there after a very first egress rule is added). Does that makes sense? (needs testing/confirmation) So automation will not be broken, that is what I am saying, and certainly., we don't touch existsing networks. pls advise if I got it wrong 🙏 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
