Support for SecurityGroup in OpenVSwitch mode in Xenserver

2015-04-15 Thread Suresh Ramamurthy
Hi Security Group Experts, I am trying to play with SecurityGroup in XenServer setup. When I looked at the latest 4.5 code I found that the code expects Bridge module to be present in Xenserver. Is that true? Is Security Group supported using OpenVSwitch in Xenserver? Thanks, Suresh

Re: Support for SecurityGroup in OpenVSwitch mode in Xenserver

2015-04-15 Thread Jayapal Reddy Uradi
Hi Suresh, Yes, for security groups expects network mode 'bridge' for xenserver. This is because the security group rules iptables/ebatables in host filters on the bridge interfaces. Please look at how we can achieve host level isolation of VM traffic for SG using openVswitch. Thanks, Jayapal

Re: Support for SecurityGroup in OpenVSwitch mode in Xenserver

2015-04-16 Thread Suresh Ramamurthy
Hi Jayapal, Thanks a lot for the response. >From what you explained, looks like SG for KVM also expects Bridge module. Correct me if I am wrong. Thanks, Suresh On Wed, Apr 15, 2015 at 11:36 PM, Jayapal Reddy Uradi < jayapalreddy.ur...@citrix.com> wrote: > Hi Suresh, > > Yes, for security grou

Re: Support for SecurityGroup in OpenVSwitch mode in Xenserver

2015-04-17 Thread Jayapal Reddy Uradi
Hi Suresh, Basically SG rules needs bridge mode. So in KVM also it expects bridge mode. Thanks, Jayapal On 17-Apr-2015, at 2:33 AM, Suresh Ramamurthy wrote: > Hi Jayapal, > > Thanks a lot for the response. > > From what you explained, looks like SG for KVM also expects Bridge module. > C