// Horizon wants this to be present, even when empty
model.ipRange = new SecurityGroupRule.IpRange();
if (data.hasFromCidr()) {
CidrData cidr = data.getFromCidr();
IpRange range = Instance.toIpRange(cidr);
model.ipRange.cidr = InetAddresses.toAddrString(range.getAddress()) + "/" + range.getNetmaskLength();
}