[pve-devel] pve-firewall and openvswitch

[Alexandre DERUMIER]

Hi,

I have found an interesting article here:
http://www.ustack.com/wp-content/uploads/2013/10/Neutron-performance-testing.pdf


about performance mixing linux bridge with openvswitch


tap1--->tap1bridge1----->(int port)ovs switch(int port)<------tap2bridge<--tap2


performance seem to be the same, than with only openvswitch switch.
(if we don't use veth pair, but ovs int port)


So maybe could we provide this kind of setup by default for all vms using openswitch ?

and firewall should works out of the box (I need to check rules)


What do you think about it ?