...
There are many permutations of possible network/interface configurations which a user can construct by attaching different interfaces to a VM at different times. Because of this, it is impossible to have a single default solution which accommodates them all automatically. We encourage users to consider their desired network behavior and ensure their routes and other appropriate settings are set correctly inside the VM
Note: Security Groups cannot be applied to SR-IOV ports. Firewall rules for these ports must be managed at the OS level