27 Jun
2016
27 Jun
'16
5:45 p.m.
Hello, Currently oVirt supports network security groups for OpenStack network provider only. Are there plans to implement Security Groups for native networks? Technically, I can configure a vNic profile with some Security Groups UUID, and apply it in before_device_create and before_update_device VDSM hooks as filterref to some custom nwfilter. The only issue is that I have to manually edit and distribute nwfilter xml among hardware nodes. If I want isolate set of VMs, I have to manually maintain MAC addresses of VMs in that xml. It would be great if oVirt web interface had a nwfilter editor. Are there plans for it? Thanks