Which mechanism prevents public exposure when floating IPs are attached to permissive security groups?
In OpenStack Neutron, security groups provide stateful filtering at the port level. While the default behavior restricts ingress traffic, a common risk involves instances assigned floating IPs that are associated with security groups containing permissive rules (e.g., 0.0.0.0/0 for administrative ports). Because security groups are applied at the instance po