> ovs 2.5 support conntrack and openstack have commited their ovs firewall (no > iptables, no bridge on top of ovs) Oh, that is based on openflow - means we would need to have 2 totally different firewall implementations?