> > isn't veth too much overhead ? (I'm a bit worried about veth
> > performance, see http://www.opencloudblog.com/?p=96)
> 
> People always compare performance of OVSIntPort with full-featured linux
> netfilter code.

BTW, do I understand the OpenStack network correctly?

1.) They use a linux bridge to apply netfilter firewall.
2.) They use an OVS bridge and plug in the linux bridge (using veth pair?)
3.) They use an (GRE) tunnel to a dedicated network host?

Not sure if that is correct, but I do not believe that is faster.



_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to