There are issues with doing this though. Juju de-couples the machine creation from the purposing of the machine. One can remove a service from a machine, and add another to any machine right now.
Bug #833064 suggests doing the firewall inside the machine using iptables. I think that may be a more flexible approach.
Bug #1027641 assigning a unique security group to each machine uses up security group quotas in HPCloud (openstack)
One per machine/instance.
There are issues with doing this though. Juju de-couples the machine creation from the purposing of the machine. One can remove a service from a machine, and add another to any machine right now.
Bug #833064 suggests doing the firewall inside the machine using iptables. I think that may be a more flexible approach.
Bug #1027641 assigning a unique security group to each machine uses up security group quotas in HPCloud (openstack)