[pve-devel] [PATCH] linux bridge and ovs new model implementation v6

Dietmar Maurer dietmar at proxmox.com
Tue May 6 08:33:49 CEST 2014


> +    my $vmfw_conf = PVE::Firewall::load_vmfw_conf($vmid);
> +    my $fwenable = $vmfw_conf->{options}->{enable};

This setting is not intended to change network interface settings. This is just to enable/disable
the rules.

My thought was that we can use /etc/pve/firewall/cluster.fw to configure that.

And to avoid the dependency problem, we can simply use another script name for interfaces
having firewall enabled - maybe:

/var/lib/qemu-server/pve-bridge-fw instead of /var/lib/qemu-server/pve-bridge




More information about the pve-devel mailing list