[CLOUDSTACK-1164] Use libvirt for security groups for KVM

• Type: Wish
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.0.0, 4.1.0
• Fix Version/s: Future
• Component/s: Hypervisor Controller, KVM
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: kvm libvirt security-groups
• Assignee: Unassigned
• Reporter: Wido den Hollander
• Created: 05/Feb/13 20:11
• Updated: 09/Jan/18 13:28

Description

The current implementation for the security groups uses a custom Python script which applies iptable and ebtable rules to the hypervisor.

Libvirt also supports this with network filters: http://libvirt.org/formatnwfilter.html

It might be cleaner to do this via libvirt, but the downside is that a lot of functions are only supported by libvirt 0.9.8 and higher.

This might not be possible at this moment, but it might be worth a shot at a later stadium.

Issue Links

• mentioned in: Page Loading...