Hello,

Currently oVirt supports network security groups for OpenStack network provider 
only. Are there plans to implement Security Groups for native networks?

Technically, I can configure a vNic profile with some Security Groups UUID, and 
apply it in before_device_create and before_update_device VDSM hooks as 
filterref to some custom nwfilter. The only issue is that I have to manually 
edit and distribute nwfilter xml among hardware nodes. If I want isolate set of 
VMs, I have to manually maintain MAC addresses of VMs in that xml.

It would be great if oVirt web interface had a nwfilter editor. Are there plans 
for it?

Thanks


_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Reply via email to