Re: [libvirt] [RFC] Proposal for introduction of network traffic filtering capabilities for filtering of network traffic from and to VMs

Note that this is the case for the standard VMware ESX vSwitch. However, the Cisco Nexus 1000v, which is an optional virtual switch for ESX, does appear to provide (guest) VM firewall capabilities. See for example the section on "isolation and protection" and ACLs in the link below: http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9902/dmz_vir... In terms of interfaces, the 1000v claims a CLI (likely similar to physical Cisco switches), support for SNMP and an XML API. Thanks, Dimitrios From: Matthias Bolte <matthias.bolte(a)googlemail.com&gt; To: Stefan Berger/Watson/IBM@IBMUS Cc: Gerhard Stenzel <gerhard.stenzel(a)de.ibm.com&gt;, libvir-list(a)redhat.com, Vivek Kashyap/Beaverton/IBM@IBMUS Date: 01/13/2010 05:43 PM Subject: Re: [libvirt] [RFC] Proposal for introduction of network traffic filtering capabilities for filtering of network traffic from and to VMs Sent by: libvir-list-bounces(a)redhat.com 2010/1/13 Stefan Berger <stefanb(a)us.ibm.com&gt;: [...] VM, VMware ESX hosts allow to configure the host level firewall via the remote VI API. But AFAIK there is no virtual machine level firewall. You're not supposed to do something like that in the service console, doing anything in the service console is not supported in general. Also there is no libvirtd in the service console because of that and because it is not necessary. The ESX driver does everything using the remote VI API. Matthias -- libvir-list mailing list libvir-list(a)redhat.com https://www.redhat.com/mailman/listinfo/libvir-list