On Thu, Dec 29, 2016 at 10:19 AM, Vincent Olivier <[email protected]> wrote:
> Hi! > > > Use the same bridge but a different tap (each tap represents the virtual > equivalent of a NIC where the bridge is the virtual equivalent of a hub) > > > Thanks! This is very clear. For extra isolation, could I use a new bridge > too or is that useless? > Yes but it only makes sense in a multi-tenant (aka cloud provider) setup because any attacker on a VM should be assumed to able to get into the host due to knowing your password (which typically is not all that different on the two machines unless you randomly generated it). -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-virtualization To unsubscribe, send any mail to "[email protected]"
