Hi All, I have set up open vSwitch and would like to use NOX as a controller for it. I've read the documentation on the NOX site and the white paper and some of the related work. I've downloaded the source and tried some of the demos.
I would like to have a controller that has the basic policy of default deny and that would allow specific flows, based on mac address (or a unique id of some kind) and protocol and/or port number (application port number, e.g. HTTP/80) and direction of the flow. For example, only allow specific client computer to connect on port 80, and don't allow any running services. Similarly, only allow specific server computers to listen on ports X,Y,Z and be disallowed from making any outgoing connections. In short, a simple whitelist policy. Can NOX be set up to do this? Is there existing NOX applications that can do this or will I need to write something? Any pointers or suggestions are greatly appreciated. Thanks, Todd -- Todd Deshane http://todddeshane.net http://runningxen.com _______________________________________________ nox-dev mailing list nox-dev@noxrepo.org http://noxrepo.org/mailman/listinfo/nox-dev_noxrepo.org