Hi all, I'd like to raise a topic for discussion regarding the changes proposed in a PR targeted to 24.0: https://github.com/apache/cloudstack/pull/13684 (reverted). The PR proposes changing the default egress policy for Isolated networks from Deny to Allow, applying to new installations and to new Isolated networks created from new network offerings (existing networks remain unchanged).
The proposed change does not update the egress policy values in the database for existing Isolated networks on upgraded environments. However, it does set the default egress policy for the default Isolated network offering to Allow on fresh installations (starting from 24.0, for example). This results in two distinct scenarios: * Upgrading existing environments to 24.0: No change to the default Isolated network offering. Any network created from the default network offering after the upgrade will behave as before, with a Deny egress policy. * Fresh installations starting on 24.0: The default Isolated network offering will have an Allow egress policy. Any network created from the default network offering will have Allow egress policy. As a result, the default Isolated network offering may behave differently across environments, depending on whether the environment was freshly installed (post-24.0) or upgraded from a long-running deployment. For new network offerings, the default egress policy will be set to Allow and the change can be documented/highlighted in the release notes. What are your thoughts on the proposed changes? Should we include this in 24.0? Any ideas/proposals to the proposed changes? Other feedback? Regards, Nicolas Vazquez Nicolas Vazquez Head of Customer Engineering s: +44 20 3603 0540 e: [email protected] | w: www.shapeblue.com | t: @shapeblue a: 3 London Bridge Street, 3rd floor, News Building, London SE1 9SG UK Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue is a registered trademark. This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Find out more about ShapeBlue and our range of CloudStack related services: IaaS Cloud Design Build | CloudStack Consulting | CloudStack Software Engineering CloudStack Infrastructure Support | CloudStack Bootcamp Training Courses
