----- Original Message -----
From: "Frank Wall" <fw@moov.de> To: "Moti Asayag" <masayag@redhat.com> Cc: users@ovirt.org Sent: Thursday, October 17, 2013 2:12:35 PM Subject: Re: [Users] Guest to guest multicast
Hi Moti,
On 17.10.2013 08:04, Moti Asayag wrote:
I used iperf for testing multicast between the vms. See http://iperf.fr/#multicast for the exact commands.
thanks, I did a quick test with iperf with a good result (445 out of 446 datagrams could be received). But still pfSense/FreeBSD CARP/uCARP does not work, it seems to be filtered on the oVirt/KVM Host. Have you ever heard of this? Any idea?
On ovirt 3.2 we introduced the network-filters feature [1] which prevents guests from spoofing other mac-addresses than these which assigned by the engine. The feature is enable by default since introduced (for 3.2 and above) There is a possibility that the implementation of the VRRP modifies the mac address to the expected addresses which be ended in libvirt's filtering (using the ebtables) the frames. Could you try disabling the filter, restart the vms and re-run the test ? 1. On the ovirt-engine run: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (if you're using ovirt-engine 3.2, make sure to specify it in the --cver= option). 2. Restart the ovirt-engine service 3. Restart the vms 4. Re-run the test An alternative might be to use the custom mac address for the vms which serves as routers to start with 00-00-5E-00-01-XX (as long as the mac address will not be replaced by the protocol) [1] http://www.ovirt.org/Features/Design/Network/NetworkFiltering [2]
Thanks - Frank