Comment 2 for bug 1793244

1. Default security group, which I use for now, has the following rules:

direction='ingress', ethertype='IPv4', port_range_max='65535', port_range_min='1', protocol='tcp', remote_ip_prefix='0.0.0.0/0',
direction='egress', ethertype='IPv4',
direction='ingress', ethertype='IPv4', protocol='icmp', remote_ip_prefix='0.0.0.0/0'
direction='ingress', ethertype='IPv4', port_range_max='65535', port_range_min='1', protocol='udp', remote_ip_prefix='0.0.0.0/0'

They should be enough, I think?

2. I should change firewall_driver only on compute nodes or on control nodes too?..