% !TEX encoding = IsoLatin

The optimization process produces a set of rules for each filtering point in the OpenStack deployment. Each filtering point category needs a different distribution process design because it uses different technologies.

For Iptables rules we need to distinguish from instances and physical hosts, because despite the final commands are the same, it is not always possible to reach the virtual machine via SSH connection.

In the case of virtual switches the technologies used are completely different, so it is necessary to implement an OpenFlow controller to manage flows injection to the switches.

In both cases is necessary a translation from the filtering policy to the commands to execute to inject the rules on the target host or virtual switch.

\subsection{iptables}
\input{latex_files/solution_design/iptables-design.tex}


\subsection{ovs}
\input{latex_files/solution_design/openflow-design.tex}
