[pve-devel] DHCP server

[Alexandre DERUMIER]

>>It should not be necessary since each host knows the MAC for each VM
>>running on the host and because the discover request will contain the
>>MAC of the client we can filter on MAC in the DHCP server. This way
>>only the host hosting the client will respond to the DHCP request.

Oh yes, indeed :) Great :)



----- Mail original ----- 

De: "Michael Rasmussen" <mir at datanom.net> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com, "Dietmar Maurer" <dietmar at proxmox.com> 
Envoyé: Dimanche 20 Juillet 2014 15:13:18 
Objet: Re: [pve-devel] DHCP server 

On Sun, 20 Jul 2014 15:04:29 +0200 (CEST) 
Alexandre DERUMIER <aderumier at odiso.com> wrote: 

> 
> Hi, Isn't it possible to filter dhcp request with iptables, on the host outside interface ? 
> 
> Like this, each host have a dhcp server which respond only to vms hosted on the host. 
> 
It should not be necessary since each host knows the MAC for each VM 
running on the host and because the discover request will contain the 
MAC of the client we can filter on MAC in the DHCP server. This way 
only the host hosting the client will respond to the DHCP request. 

-- 
Hilsen/Regards 
Michael Rasmussen 

Get my public GnuPG keys: 
michael <at> rasmussen <dot> cc 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E 
mir <at> datanom <dot> net 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C 
mir <at> miras <dot> org 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 
-------------------------------------------------------------- 
/usr/games/fortune -es says: 
Time is but the stream I go a-fishing in. 
-- Henry David Thoreau