Should we have to do this? Can we not get jclouds to do it, via the entity.getRequiredOpenPorts() method? That should configure the open ports, and then jclouds should open them up for us (with iptables on rackspace or with security groups on aws).