Re: [PROPOSAL] More Flexible Security Group Implementation

2014-03-25 Thread Jeff Hair
Hi, If the isVmWare checks are removed, what would they be replaced with instead? Would it be an additional method in the Security Group Manager? On Mon, Mar 24, 2014 at 5:40 PM, Chiradeep Vittal < chiradeep.vit...@citrix.com> wrote: > Hi, I believe the right layer of abstraction is present in

Re: [PROPOSAL] More Flexible Security Group Implementation

2014-03-24 Thread Chiradeep Vittal
Hi, I believe the right layer of abstraction is present in the SG manager (and yes, we should remove isVMWare checks). This abstraction works at the ‘policy’ level: which IP/VM is allowed to talk to which VM/IP. This policy is translated into a concrete implementation by the resources. So I don