Comment 2 for bug 1712540

Yes, this seems to be a regression. In the old client you could say "neutron security-group-rule-create" without a "--protocol" option, and you'd get a protocol-agnostic rule. But in the new client ("openstack security group rule create"), "--protocol" defaults to "TCP".

It is important to be able to easily restore a protocol-agnostic security group rule, for example when users remove rules from their instance of the "default" Security Group and later want to restore them (or have the operator restore them).