[pve-devel] [PATCH] use linko+ name for ovs fwbrint interfaces
Dietmar Maurer
dietmar at proxmox.com
Tue May 13 09:41:14 CEST 2014
> we need to match link+ rule from iptables rules, and need to have a name
> different than link(\d+)i(\d+), for distinguished bridge/ovs interface unplug
We currently generate:
'-A PVEFW-FORWARD -m physdev --physdev-is-bridged --physdev-in link+ -j PVEFW-FWBR-IN',
'-A PVEFW-FORWARD -m physdev --physdev-is-bridged --physdev-out link+ -j PVEFW-FWBR-OUT',
Can't we simply do something like:
'-A PVEFW-FORWARD -o fwbr+ -j PVEFW-FWBR-IN',
'-A PVEFW-FORWARD -i fwbr+ -j PVEFW-FWBR-OUT',
So that we do not depend on those 'link' names?
More information about the pve-devel
mailing list