[ovirt-users] Re: Add custom Network Filter to oVirt
> > No. > What could oVirt do, to make this flow more comfortable? The dream would be to have a feature to upload xml files with the new rule(s) via the webinterface of oVirt or via the API. I always feel a little uncomfortable doing changes to libvirt outside of ovirt as I am not sure if an update would overwrite my changes. > On 30. Apr 2020, at 09:19, Dominik Holler wrote: > > > > On Thu, Apr 30, 2020 at 8:43 AM Hendrik Peyerl wrote: > Thank you Dominik, are there any plans to add such a feature in the future? > > Thanks, > Hendrik > > > On 29. Apr 2020, at 21:25, Dominik Holler wrote: > > > > > > > > On Wed, Apr 29, 2020 at 6:40 PM Sandro Bonazzola > > wrote: > > > > > > Il giorno mer 29 apr 2020 alle ore 15:35 Hendrik Peyerl > > ha scritto: > > Hello all, > > > > can anyone give me a hint on where to find documentation on how to add > > custom created network filters through oVirt? > > > > +Dominik Holler have you any link at hand for this? > > > > > > Custom network filters are not supported and documented, but should work. > > Probably you are already aware of > > https://libvirt.org/formatnwfilter.html > > which describes how to add a network filter for libvirt on a single host. > > > > oVirt does not help to distribute the custom network filters for libvirt to > > the hosts, > > it is up to the user to ensure that the custom network filter is available > > to libvirt on all oVirt hosts. > > > > To enable oVirt to use a custom network filter of libvirt, its name has to > > be added to oVirt's database to the table > > network_filter > > manually. > > > > > > > > > > Thanks, > > > > Hendrik > > ___ > > Users mailing list -- users@ovirt.org > > To unsubscribe send an email to users-le...@ovirt.org > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/O57QAOTVOLKXNYZBTEVQNIZ75EDVMZRV/ > > > > > > -- > > Sandro Bonazzola > > MANAGER, SOFTWARE ENGINEERING, EMEA R RHV > > Red Hat EMEA > > sbona...@redhat.com > > > > > > Red Hat respects your work life balance. Therefore there is no need to > > answer this email out of your office hours. > ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/UDS5EH7LMBDOASFPULF2IWCSAOMIMW6M/
[ovirt-users] Re: Add custom Network Filter to oVirt
Thank you Dominik, are there any plans to add such a feature in the future? Thanks, Hendrik > On 29. Apr 2020, at 21:25, Dominik Holler wrote: > > > > On Wed, Apr 29, 2020 at 6:40 PM Sandro Bonazzola wrote: > > > Il giorno mer 29 apr 2020 alle ore 15:35 Hendrik Peyerl > ha scritto: > Hello all, > > can anyone give me a hint on where to find documentation on how to add custom > created network filters through oVirt? > > +Dominik Holler have you any link at hand for this? > > > Custom network filters are not supported and documented, but should work. > Probably you are already aware of > https://libvirt.org/formatnwfilter.html > which describes how to add a network filter for libvirt on a single host. > > oVirt does not help to distribute the custom network filters for libvirt to > the hosts, > it is up to the user to ensure that the custom network filter is available to > libvirt on all oVirt hosts. > > To enable oVirt to use a custom network filter of libvirt, its name has to be > added to oVirt's database to the table > network_filter > manually. > > > > > Thanks, > > Hendrik > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/O57QAOTVOLKXNYZBTEVQNIZ75EDVMZRV/ > > > -- > Sandro Bonazzola > MANAGER, SOFTWARE ENGINEERING, EMEA R RHV > Red Hat EMEA > sbona...@redhat.com > > > Red Hat respects your work life balance. Therefore there is no need to answer > this email out of your office hours. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3YOM3JKSC4HAQQHS323IZAZF7QBZLXZR/
[ovirt-users] Add custom Network Filter to oVirt
Hello all, can anyone give me a hint on where to find documentation on how to add custom created network filters through oVirt? Thanks, Hendrik ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/O57QAOTVOLKXNYZBTEVQNIZ75EDVMZRV/
[ovirt-users] Re: Client separation on bridge level
Thank you for this, I think we can work with this solution (if it works) for most VLANs. We also have a different case where we have the VMs in a Layer2 VLAN for NFS Shares from a Storage Pool with no gateways, do you guys maybe have an idea how to seperate those VMs? Thanks, Hendrik > On 16. Mar 2020, at 14:08, Alan G wrote: > > Look at Network Filters in the vNIC profile for the network. I haven't tested > it but there is one called clean-traffic-gateway, which I believe allows only > communication between a VM and the designated gateway. > > > On Mon, 16 Mar 2020 10:11:57 + Hendrik Peyerl > wrote > > We do have certain VLANs that all the VMs need as of now, we will be able to > do this at some point but I need a solution until then. > > > > > On 16. Mar 2020, at 11:08, Staniforth, Paul > > wrote: > > > > Can't you put then on separate VLANs? > > > > > > Regards, > > Paul S. > > From: Hendrik Peyerl > > Sent: 16 March 2020 09:24 > > To: users@ovirt.org > > Subject: [ovirt-users] Client separation on bridge level > > > > Caution External Mail: Do not click any links or open any attachments > > unless you trust the sender and know that the content is safe. > > > > Hello everyone, > > > > is there a way to seperate the traffic between VMs on the same bridge on > > one oVirt-node with built-in tools from ovirt? We have VMs using the same > > bridge which should never be able to talk to each other. > > > > We are currently using ebtables for that, but its not working very good > > anymore now that we upgraded to 4.3 with firewalld. > > > > Any suggestions would be greatly appreciated. > > > > Best regards, > > Hendrik > > ___ > > Users mailing list -- users@ovirt.org > > To unsubscribe send an email to users-le...@ovirt.org > > Privacy Statement: > > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fprivacy-policy.htmldata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647874123sdata=gRXkeXI%2BGPrJVCS6zNBE%2Fe4Z7Ec%2FO0qxdRyRpAckPx4%3Dreserved=0 > > > > oVirt Code of Conduct: > > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2Fdata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647884122sdata=20dOQRRZzxqTVx%2FmUOlYLEbBD7dW2B6n%2FIRRXILlQzw%3Dreserved=0 > > > > List Archives: > > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovirt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FZ54FEL45UJ5ONB67EDFCYAN7N64AMUPE%2Fdata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647884122sdata=Jqf15c%2BMegSWxe7jp%2BQfVnJQgOZEQYxUPp4TGYqzUtY%3Dreserved=0 > > > > To view the terms under which this email is distributed, please go to:- > > http://leedsbeckett.ac.uk/disclaimer/email/ > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/4AZJIDGF5VR3RR7JSNUUAAKRN57J33UE/ > > ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/IIVVFBXPYI3DWRXZGHIYUQJGFIAOUQBX/
[ovirt-users] Re: Client separation on bridge level
We do have certain VLANs that all the VMs need as of now, we will be able to do this at some point but I need a solution until then. > On 16. Mar 2020, at 11:08, Staniforth, Paul > wrote: > > Can't you put then on separate VLANs? > > > Regards, > Paul S. > From: Hendrik Peyerl > Sent: 16 March 2020 09:24 > To: users@ovirt.org > Subject: [ovirt-users] Client separation on bridge level > > Caution External Mail: Do not click any links or open any attachments unless > you trust the sender and know that the content is safe. > > Hello everyone, > > is there a way to seperate the traffic between VMs on the same bridge on one > oVirt-node with built-in tools from ovirt? We have VMs using the same bridge > which should never be able to talk to each other. > > We are currently using ebtables for that, but its not working very good > anymore now that we upgraded to 4.3 with firewalld. > > Any suggestions would be greatly appreciated. > > Best regards, > Hendrik > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fprivacy-policy.htmldata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647874123sdata=gRXkeXI%2BGPrJVCS6zNBE%2Fe4Z7Ec%2FO0qxdRyRpAckPx4%3Dreserved=0 > oVirt Code of Conduct: > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2Fdata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647884122sdata=20dOQRRZzxqTVx%2FmUOlYLEbBD7dW2B6n%2FIRRXILlQzw%3Dreserved=0 > List Archives: > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovirt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FZ54FEL45UJ5ONB67EDFCYAN7N64AMUPE%2Fdata=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cd93d2591b762400ae11808d7c98c46a2%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C1%7C637199476647884122sdata=Jqf15c%2BMegSWxe7jp%2BQfVnJQgOZEQYxUPp4TGYqzUtY%3Dreserved=0 > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4AZJIDGF5VR3RR7JSNUUAAKRN57J33UE/
[ovirt-users] Client separation on bridge level
Hello everyone, is there a way to seperate the traffic between VMs on the same bridge on one oVirt-node with built-in tools from ovirt? We have VMs using the same bridge which should never be able to talk to each other. We are currently using ebtables for that, but its not working very good anymore now that we upgraded to 4.3 with firewalld. Any suggestions would be greatly appreciated. Best regards, Hendrik ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z54FEL45UJ5ONB67EDFCYAN7N64AMUPE/
[ovirt-users] Re: [Spice-devel] Re: remote-viewer Spice Problem on MacOS
I have now opened a Bugreport, not sure if it's in the correct section, but lets pray ;) https://gitlab.freedesktop.org/spice/spice/issues/22 ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJAKRWKDKZHFSZFK23W3IT54COXPG5CA/
[ovirt-users] Re: remote-viewer Spice Problem on MacOS
I have found a temporary? solution that seems to be working for us. As I predicted it is indeed the lockscreen that leads to the problem. Per default the VMs will lock the screen after 10 minutes at which time I was not able to connect to it anymore. Here is how i disabled the lockscreen: Set it during the runtime: TERM=linux setterm -blank 0 -powerdown 0 -powersave off >/dev/tty0 https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TS4BNXZ6H2GNO7AKDNKO3MQA5I32OYLV/
[ovirt-users] Re: remote-viewer Spice Problem on MacOS
That is infact a very interesting Information as we basically only run CentOS VMs, I have tried to connect to our CentOS 7.4 VMs and that actually worked everytime. I did manage to get an error from the debug output of my RemoteViewer.app: GSpice-CRITICAL **: display_handle_monitors_config: assertion `config->count > 0' failed I'm going to further investigate what differences CentOS 7.5 brought that could lead to this, my first Idea is that this could be related to screensavers. I'll keep you guys posted. Thanks, Hendrik ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/GK7MULOP7LKARSIY5DVVFSCWQWOC24RW/
