>>yes, I want it ;-) And it seems we can do it with the veth setup. 
Ah ok ! seem more clear now.

isn't veth too much overhead ? (I'm a bit worried about veth performance, see 
http://www.opencloudblog.com/?p=96)

couldn't we scan bridges arp tables, and make rules with ips ? (at least for 
routed guests)
(or manage guests ips in vm configs)

----- Mail original ----- 

De: "Dietmar Maurer" <diet...@proxmox.com> 
À: "Alexandre DERUMIER" <aderum...@odiso.com> 
Cc: pve-devel@pve.proxmox.com 
Envoyé: Mardi 11 Mars 2014 14:40:42 
Objet: RE: [pve-devel] pvefw: masquerade problems and conntrack zones 

> Well,If I remember,we don't allow traffic routing between taps on differents 
> vmbrX when firewall is enabled. 
> 
> Or maybe do you want that finally ? 

yes, I want it ;-) And it seems we can do it with the veth setup. 
_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to