* The Firewall-as-a-Service project is still marked as experimental for the Kilo release. * Bug [https://bugs.launchpad.net/neutron/+bug/1438819 1438819] ** When a new subnet is created on an external network, all existing routers with gateways on the network will get a new address allocated from it. For IPv4 networks, this could consume the entire subnet for router gateway ports.