[pve-devel] [PATCH pve-docs 1/1] add vxlan l3 routing

Dietmar Maurer dietmar at proxmox.com
Sun Aug 12 13:53:27 CEST 2018



> On August 12, 2018 at 1:28 PM Alexandre DERUMIER <aderumier at odiso.com> wrote:
> 
> 
> >>But I think we cannot simply turn off rp_filter, see
> >>
> >>https://vincent.bernat.im/en/blog/2017-linux-bridge-isolation
> >>
> >>Maybe we can use vrf (instead of rp_filter) to isolate our bridges??
> 
> with symmetric routing, all bridges are in a vrf.

What about other bridges in the system which does not use vxlan at all (firewall
bridges)?




More information about the pve-devel mailing list