Re: [Openstack] Security group isolation on same physical host--perhaps needs to enhance openstack security on multihost model

Hi, The same situation I also met,I think that would be security hole of openstack that should be resolved, hope someone could fix it. If you use 1xNetwork+Nxcompute model, the VMs on compute node could not touch each other, but if you use multihost model, means each node run network+compute s

Re: [Openstack] Security group isolation on same physical host

Hi, If they're in the same subnet, they won't go through a firewall to reach each other. I'd imagine this is expected. Cheers, On Thu, 2012-06-07 at 10:00 -0400, Mitchell Broome wrote: > So I'm running into a problem where two different virtual machines on > the same physical host can get to ea

Re: [Openstack] Security group isolation on same physical host

Looks like I tracked down the problem. I needed to enable netfilter on the bridge. On Thu, Jun 7, 2012 at 10:00 AM, Mitchell Broome wrote: > So I'm running into a problem where two different virtual machines on > the same physical host can get to each other bypassing security > groups.  As a te