> >>So the question is: Can we build a full featured firewall using openflow? > > I think it's not yet possible, but it's on the roadmap of openstack > https://blueprints.launchpad.net/neutron/+spec/ovs-firewall-driver
The problem is the openflow itself is limited, so it technically not possible to implement many iptables features. I guess that is one reason why it is faster. But maybe I am wrong? _______________________________________________ pve-devel mailing list [email protected] http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
