Rudder

Often we have a general requirement that covers "all" of our servers - except those one or two (or 10 or 20 or only 100 out of 10000, etc). This happens quite often, for example: all of my servers should have a firewall that closes port 80, except my web server.

I think this could be done with a priorisation of policy instances - ie set the general (default) one to a low priority, and have others (exceptions) to a higher priority.

Another approach would be to have a "global" setting that applies to all servers, as a default value, and set new PIs for exceptions.

Any ideas on how we could do this?