Recently, I was studying the distributed firewall. And according to my knowledge, the security group mechanism of AWS is enforced by its distributed firewall. I wonder, is the security group of Euca also implemented in the distributed firewall manner? Any suggestion about the detailed design and implementation (rather than the source code) of Euca's security group would be highly appreciated. Thanks a lot.