Hi Jay Thank you ,of Great help indeedI had one more question Can we limit 
number of processes in a container ?How to detect that a processes is trying to 
get created in  a container?ThanksSrinivas

From: j...@jaytaylor.com
Date: Wed, 25 Sep 2013 09:24:40 -0700
Subject: Re: [Lxc-users] reg iptables usage in containers
To: aartipsawan...@gmail.com
CC: sri...@outlook.com; lxc-users@lists.sourceforge.net

Hi Srini,
Learning the iptables rules can be tricky at first, especially when you're new 
to LXC.  I highly recommend finding a way to automate the process.


Here is a real-world example of how iptables can be setup on a per-container 
basis in LXC:
    https://github.com/Sendhub/shipbuilder/blob/master/src/scripts.go#L38


This is a python script which is run to clone and launch a new container and 
setup the iptables TCP port-forwarding for it.
Hope this is useful.
Best regards,

Jay

On Tue, Sep 24, 2013 at 2:21 AM, Aarti Sawant <aartipsawan...@gmail.com> wrote:


hello,
Bellow link might be useful for setting up iptables per conatiners
http://openvz.org/Setting_up_an_iptables_firewall



Thanks,Aarti SawantNTTDATA OSS Center Pune

On Tue, Sep 24, 2013 at 5:37 AM, srinivas k <sri...@outlook.com> wrote:






Hi Group.
I am new to lxc and I am trying to create containers for the first time.
My plan is to create 2 containers using lxc-create and do some networking 
between  2containers using a br0 as bridge between 2 containers 



What is the basic procedure to do the below
1.How to setup iptables per container 
2.How to filter out incoming traffic traffic per container using iptables with 
respect to that particular container



Will be thankful for any help or pointers 
RegardsSrini                                      

------------------------------------------------------------------------------

October Webinars: Code for Performance

Free Intel webinars can help you accelerate application performance.

Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from

the latest Intel processors and coprocessors. See abstracts and register >

http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________




Lxc-users mailing list

Lxc-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/lxc-users





------------------------------------------------------------------------------

October Webinars: Code for Performance

Free Intel webinars can help you accelerate application performance.

Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from

the latest Intel processors and coprocessors. See abstracts and register >

http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________



Lxc-users mailing list

Lxc-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/lxc-users



                                          
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to