Re: [ovs-discuss] Playing with libvirt, iptables and Open vSwitch

2013-12-18 Thread Yoann Juet
It's possible to configure the same thing manually by connecting multiple bridges. You might also be able to write your iptables rules using OpenFlow directly, which would be the most efficient. Thanks Jesse, We need connection tracking for protocols like ftp, sip that's why I do not intend t

Re: [ovs-discuss] Playing with libvirt, iptables and Open vSwitch

2013-12-12 Thread Jesse Gross
On Thu, Dec 12, 2013 at 2:24 AM, Yoann Juet wrote: > Hi all, > > We're using since a long time libvirt with KVM guest machines and linux > bridges. Firewall rules based on iptables and defined on the host server > control inbound/outbound traffic to/from each VM. In order to improve remote > admin

[ovs-discuss] Playing with libvirt, iptables and Open vSwitch

2013-12-12 Thread Yoann Juet
Hi all, We're using since a long time libvirt with KVM guest machines and linux bridges. Firewall rules based on iptables and defined on the host server control inbound/outbound traffic to/from each VM. In order to improve remote administration facility and get extra services, it makes sense