openstack firewall FWaaS tutorial
FWaaS uses iptables to apply firewall policy to all Networking routers within a project. FWaaS supports one firewall policy and logical firewall instance per project.
Firewall Vs Security Group
security groups operate at the instance-level, FWaaS operates at the perimeter to filter traffic at the neutron router.
by Zariga Tongy
openstack