Hi!
No we're using vlans with simple bridging. I've used ovswitch in past
and do not remember anything about "ip hijacking" prevention in it. How
can ovswitch know what ip/mac must be on vm interface? Will it be
usefull if VMs living on different virtualization hosts?
30.04.2014 0:13, Stefan Kooman пишет:
Quoting Maxim Terletskiy (terlets...@emu.ru):
Thanks for answer.
We're giving white ips from several networks, dhcp not very well fit
our needs. So using context for network settings setup.
Now we're looking for solution which prevent vm A with ip X from use
of ip Y which belongs to vm B. X and Y are ips from one network in
one vlan.
Are you using openvswitch? In that case you already have "mac spoofing"
and "IP Hijacking" prevention [1]. OpenFlow rules are used to set that
up. Note that it only works for IPv4 addresses. IPv6 is not covered yet.
Gr. Stefan
[1]:
http://docs.opennebula.org/4.6/administration/networking/openvswitch.html
_______________________________________________
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
