Re: [RFC][FS]PVLAN for isolation within a VLAN

2013-04-18 Thread Murali Reddy
On 18/04/13 6:29 AM, "Chip Childers" wrote: >On Wed, Apr 17, 2013 at 05:49:23PM -0700, Sheng Yang wrote: >> In fact that's the requirement for this design. We need this very strict >> restriction to implement isolation for the VMs. PVLAN is the way we >>used to >> approach this requirement. > >As

RE: [RFC][FS]PVLAN for isolation within a VLAN

2013-04-17 Thread Paul Angus
d.com] Sent: 18 April 2013 02:00 To: dev@cloudstack.apache.org Subject: Re: [RFC][FS]PVLAN for isolation within a VLAN On Wed, Apr 17, 2013 at 05:49:23PM -0700, Sheng Yang wrote: > In fact that's the requirement for this design. We need this very strict > restriction to implement isola

Re: [RFC][FS]PVLAN for isolation within a VLAN

2013-04-17 Thread Chip Childers
On Wed, Apr 17, 2013 at 05:49:23PM -0700, Sheng Yang wrote: > In fact that's the requirement for this design. We need this very strict > restriction to implement isolation for the VMs. PVLAN is the way we used to > approach this requirement. As a user, the whole point of this type of network is to

Re: [RFC][FS]PVLAN for isolation within a VLAN

2013-04-17 Thread Sheng Yang
In fact that's the requirement for this design. We need this very strict restriction to implement isolation for the VMs. PVLAN is the way we used to approach this requirement. Community VLAN is more like normal VLANs, which shared the information in between. That's not of our concern currently. T

Re: [RFC][FS]PVLAN for isolation within a VLAN

2013-04-17 Thread Murali Reddy
Sheng, Thanks for the FS. Couple of points in FS that made me curious of the rational behind it. Why do you want to all the end user VM's (except for DHCP server VM) in shared network to be connected only to I-port's. This means that even VM's of same user can not talk to each other, right? Is'nt

[RFC][FS]PVLAN for isolation within a VLAN

2013-04-16 Thread Sheng Yang
Hi all, I am current working on a new mechanism to archive isolation for advance shared network. It took advantage of PVLAN feature of Cisco switch, to achieve isolation using a simpler way. Here is the FS. You probably need to read references(in the link) to get an idea of PVLAN first. https://