Good people of the community,
Hope you are all doing well. We are exploring the network filters in oVirt to check if we
can implement a zero-trust model at the network level. The intention is to have a filter
which takes two parameters, IP and PORT. After that there will be a 'deny all'
rule. We realized that none of the default network filters offer such a functionality and
the only option is to write a custom filter.
Why don't we have such a filter in libvirt and thereby in oVirt? Someone would've
already thought about such a use case. So I was thinking maybe network filters aren't
meant to be used for implementing such functionalities like zero-trust?
Also what are some practical use cases of the default filters that are provided? I was
able to understand and use the clean-traffic and clean-traffic-gateway.
Regards,
ravi