On Thu, Dec 29, 2016 at 10:19 AM, Vincent Olivier <vinc...@up4.com> wrote:
> Hi! > > > Use the same bridge but a different tap (each tap represents the virtual > equivalent of a NIC where the bridge is the virtual equivalent of a hub) > > > Thanks! This is very clear. For extra isolation, could I use a new bridge > too or is that useless? > Yes but it only makes sense in a multi-tenant (aka cloud provider) setup because any attacker on a VM should be assumed to able to get into the host due to knowing your password (which typically is not all that different on the two machines unless you randomly generated it). -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org _______________________________________________ freebsd-virtualization@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-virtualization To unsubscribe, send any mail to "freebsd-virtualization-unsubscr...@freebsd.org"
