On 05/15/2014 06:42 AM, Matt . wrote:macspoofing is more than just promiscuous mode for port mirroring, which does require the hook to be installed (and the VM to be restarted)
OK, now I'm confused.
For MacSpoofing we per default don't have the "macspoof" feature in the
engine am I right ?
To get that... you need to set:
engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.X
But no hook needs to be installed for this ? I don't have ping at the momment with macspoof set on true on a VM.
<mailto:iheim@redhat.com>>:
On 05/15/2014 04:26 AM, Matt . wrote:
Itamar,
On some testhost I'm updating now to 3.4(.x) I also need to
install the
hook it seems... it's not there by default.
Any idea why you thought it should be ?
there is no need for the hook for port mirroring. you can define a
vnic profile with port mirroring via the engine and vdsm has this
feature built-in.
if you need more than just port mirroring (say, port forwarding),
then you still need the hook.
Cheers,
Matt
2014-05-12 14:55 GMT+02:00 Matt . <yamakasi.014@gmail.com
<mailto:yamakasi.014@gmail.com>Hi,<mailto:iheim@redhat.com <mailto:iheim@redhat.com>>>:
I really needed to enable the hook... Will investigate on
new hosts!
2014-05-11 22:37 GMT+02:00 Itamar Heim <iheim@redhat.com
<mailto:iheim@redhat.com><mailto:yamakasi.014@gmail.com>__>__>>:
On 04/17/2014 04:08 AM, Matt . wrote:
Hi Guys,
I'm not able to write a howto yet as we need to
check how
this is
running on high traffic and we are going soon.
Than, we need
to test
some other functions before I can actually write
something down.
Because this is not all documented well indeed I'm in
testmode and doing
some @ life system as reallife environments are always
coming with other
things than your prefec test.
I cannot say I needed promiscuouity, I did some
things you would
normally do on pfsense which fixed that part. Some old
message you
really need to discard instead of clicking it away was
confusing this test.
you are not supposed to need the promiscious hook for
sniffing/mirroring - that's by now part of engine/vdsm
(at vnic
level in earlier versions, and at network profile in later
versions iirc)
2014-04-17 9:08 GMT+02:00 Dan Kenigsberg
<danken@redhat.com <mailto:danken@redhat.com>
<mailto:danken@redhat.com <mailto:danken@redhat.com>>
<mailto:danken@redhat.com
<mailto:danken@redhat.com> <mailto:danken@redhat.com
<mailto:danken@redhat.com>>>>:
On Thu, Apr 17, 2014 at 01:11:13AM +0200, Matt
. wrote:
> OK, also this is finetuned, but it would be
nice to
have some
more info
> about the hooks in these cases... it's
interesting
as oVirt has
the right
> settings to start with but we need to know
what we
need to set
when we have
> a setup like this for an example.
Could you explain what you have done, and what
do you
need promiscuouity
for? oVirt has "port mirroring" that allows to
mirror
ip traffic from
one vm network to another.
>
>
> 2014-04-17 0:35 GMT+02:00 Matt .
<yamakasi.014@gmail.com
<mailto:yamakasi.014@gmail.com> <mailto:yamakasi.014@gmail.com
<mailto:yamakasi.014@gmail.com>__>
<mailto:yamakasi.014@gmail.com
<mailto:yamakasi.014@gmail.com>
<mailto:yamakasi.014@gmail.comhttp://www.blissfulidiot.com/____2013/11/using-carp-with-____vmware-esxi.html
>
> > Traffic issues are solved, but the
advertising in
not that well.
> >
> > I see on ESXi (vSphere) that you need to
enable
"Promiscuous
Mode", but
> > how on oVirt ?
> >
> >
<http://www.blissfulidiot.com/__2013/11/using-carp-with-__vmware-esxi.html>___________________________________________________
<http://www.blissfulidiot.com/__2013/11/using-carp-with-__vmware-esxi.html
<http://www.blissfulidiot.com/2013/11/using-carp-with-vmware-esxi.html>>
> >
> > Do I need the vdsm-hook-promisc for it ?
as I need
to make real
settings
> > on a VM there I think the vswitch only
needs the mode.
> >
> > Information is welcome!
Users mailing list
Users@ovirt.org <mailto:Users@ovirt.org> <mailto:Users@ovirt.org
<mailto:Users@ovirt.org>>
http://lists.ovirt.org/____mailman/listinfo/users
<http://lists.ovirt.org/__mailman/listinfo/users>
<http://lists.ovirt.org/__mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>>