Thank you for your advice,Clint,I'll try.

2014-05-31 21:47 GMT+08:00 Clint Byrum <[email protected]>:

> Be permissive on br-ex to allow VM traffic to flow out to the internet.
> Otherwise be protective of the host address that the machine listens to.
>
> Excerpts from walterxj's message of 2014-05-31 13:46:24 +0100:
> >
> >
> >
> >
> >
> >
> > hi all:  The network node(s) is the only node(s) that expose to the
> internet,so it's security setting is more important,So I think it needs to
> be protect by iptables or firewall etc.  On the other hand,network nodes
> control all the vm instances' network traffic,I have no ideas how to
> setting it's iptables rules.Is there any advices or examples to set the
> network node's iptables?
> >
> >
> > Walter Xu
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : [email protected]
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : [email protected]
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to