Hi, I would like to restrict of usage IP address on VMs. Thos could be achied by usinf clear-filter instead of vdsm-no-mac-spoofing. I have found noipspoof vdsm hook, https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/noipspoof. This hook but set the filtering on all interfaces, the setting is on VM level, not interface level. So if the there are more interfaces on all of them. I would like just restrict the WAN interface on multi homed VMs. Peter -- *Peter Hudec* Infraštruktúrny architekt phudec(a)cnc.sk <mailto:phudec@cnc.sk> *CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100 Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk> _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Thanks, this was the last part into my puzzle, HOST INTERFACE params. The example hook provided in https://bugzilla.redhat.com/show_bug.cgi?id=1366905#c8, https://bugzilla.redhat.com/attachment.cgi?id=1232201 looks good, but it seems to set the IP param on all interfaces too, regardless on which interface the NIC PARAM is set. The hooks should be called per vNIC, as reading the https://www.ovirt.org/documentation/admin-guide/appe-VDSM_and_Hooks/#the - -vdsm-hook-domain-xml-object, the one/several of thees hooks should be used or maybe I'm wrong ;( Peter On 14/04/2018 07:04, Eitan Raviv wrote: > You might find the following useful: > > https://ovirt.org/develop/release-management/features/network/networkf ilterparameters/ > > HTH > > On Thu, Apr 12, 2018, 14:52 Peter Hudec <phudec(a)cnc.sk > <mailto:phudec@cnc.sk>> wrote: > > Hi, > > I would like to restrict of usage IP address on VMs. Thos could be > achied by usinf clear-filter instead of vdsm-no-mac-spoofing. > > I have found noipspoof vdsm hook, > https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/noipspoof. > > This hook but set the filtering on all interfaces, the setting is > on VM level, not interface level. So if the there are more > interfaces on all of them. I would like just restrict the WAN > interface on multi homed VMs. > > Peter > > -- *Peter Hudec* Infraštruktúrny architekt phudec(a)cnc.sk > <mailto:phudec@cnc.sk> <mailto:phudec@cnc.sk > <mailto:phudec@cnc.sk>> > > *CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 > 100 > > Mobil:+421 905 997 203 *www.cnc.sk <http://www.cnc.sk>* > <http:///www.cnc.sk <http://www.cnc.sk>> > > _______________________________________________ Users mailing list > Users(a)ovirt.org <mailto:Users@ovirt.org> > http://lists.ovirt.org/mailman/listinfo/users > - -- *Peter Hudec* Infraštruktúrny architekt phudec(a)cnc.sk <mailto:phudec@cnc.sk> *CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100 Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk>