[pve-devel] [PATCH] use linko+ name for ovs fwbrint interfaces

Dietmar Maurer dietmar at proxmox.com
Tue May 13 18:23:20 CEST 2014


> Yes, but an important, because each packet going out from fwbr do
> 
> first iptables lookup
> ----------------------
> tap->fwbr->fwln
> 
> second iptables lookup
> -----------------------
> fwpr->vmbr->...
> 
> 
> so, for this second lookup, we'll parse all the main chains.

Why not:

-A PVEFW-FORWARD -i vmbr+ -j RETURN

or is this a bad idea?


More information about the pve-devel mailing list