I am creating a private network on OVH using the Openstack CLI. I would like to control allowed traffic between subnets servers and mainly from internet. This is still my learning/ discovery task.
On other cloud providers we're commonly using the security groups to control the networking rules. There is even documentation about creating the security groups using the Openstack CLI or the Horizon interface.
At OVH the quota of the security groups is set to 0, quota is exceeded by default and I am unable to create any SG. I asked about it in a support ticket, they treat it as requesting a quota increase and refused to do so. WTF?
From that I have impression that the security group implementation at OVH is not so scalable as for other cloud providers and there are some constraints.
Questions:
Are the SG really so constrained on OVH?
How shall we control / restrict traffic for the servers t OVH? (mainly from internet). I found there's an option to configure the "Edge firewall" for external IPv4 addresses, but I see no option to control the FW from the Openstack API or Terraform.
On AWS/Azure we're using the SG to control traffic between services (load balancer, backend app, db, ..), what is adviced way to do so on OVH then?