On Thu, Dec 12, 2013 at 2:24 AM, Yoann Juet <yoann.j...@univ-nantes.fr> wrote:
> Hi all,
>
> We're using since a long time libvirt with KVM guest machines and linux
> bridges. Firewall rules based on iptables and defined on the host server
> control inbound/outbound traffic to/from each VM. In order to improve remote
> administration facility and get extra services, it makes sense for us to
> replace linux bridges with Open vSwitch. However, the side effect is the
> solution's inability to filter (with netfilter/iptables) VM traffic since
> it's impossible to set-up iptables rules with ovs bridges. OpenStack/Quantum
> circumvents this problem (no talking about performance) by setting an extra
> linux bridge and veth pair between the guest TAP and ovs.
>
> Is there {a simple|an alternative} solution to achieve it without installing
> the OpenStack/Quantum layer ?

It's possible to configure the same thing manually by connecting
multiple bridges. You might also be able to write your iptables rules
using OpenFlow directly, which would be the most efficient.
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to