[ovirt-users] Re: Network filters in oVirt : zero-trust, IP and port filtering
On Wed, Feb 9, 2022 at 7:25 AM ravi k <kottapar(a)gmail.com> wrote:
> you can use it from the engine under some conditions.
> 1) You need to make sure that all hosts have this filter.
> 2) You need to define this filter in engine DB otherwise you would need
> some kind of hook to apply it.
Thanks a lot for that. If there's any doc that hints on how to define the
filter in the engine DB, can you please point me there?
This query should do the trick:
INSERT INTO network_filter VALUES (uuid_generate_v1(),
'clean-traffic-gateway' , '4.6');
Instead of 'clean-traffic-gateway' insert the name of your filter.
The third parameter is cluster version which you can find in your cluster
definition,
if you are past 4.4.6 it should be 4.6.
Once this is done you should see the filter available in the list on vNIC
profiles.
Right now I'm creating a filter to test for this functionality.
Once it's
working I'll then try defining it in the DB.
Also if it's working as expected we'll submit it to libvirt as well.
If the filter gets accepted to libvirt, feel free to open PR on
ovirt-engine to include this filter for other oVirt users.
Regards,
ravi
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6DTFTTGNWTN...
Regards,
Ales
--
Ales Musil
Senior Software Engineer - RHV Network
Red Hat EMEA <https://www.redhat.com>
amusil(a)redhat.com IM: amusil
<https://red.ht/sig>
Attachments:
- attachment.html (text/html — 4.6 KB)