On Thu, Dec 29, 2016 at 10:19 AM, Vincent Olivier <vinc...@up4.com> wrote:

> Hi!
> > Use the same bridge but a different tap (each tap represents the virtual
> equivalent of a NIC where the bridge is the virtual equivalent of a hub)
> Thanks! This is very clear. For extra isolation, could I use a new bridge
> too or is that useless?

Yes but it only makes sense in a multi-tenant (aka cloud provider) setup
because any attacker on a VM should be assumed to able to get into the host
due to knowing your password (which typically is not all that different on
the two machines unless you randomly generated it).

Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
freebsd-virtualization@freebsd.org mailing list
To unsubscribe, send any mail to 

Reply via email to