**Exception**

Adding IPv6 firewalling on OpenStack hosts is left up to the deployer to
configure. Deployers are urged to use proper network segmentation between
their OpenStack infrastructure and virtual machines, which will mitigate
many of the most critical threats.