using Network_Custom_Properties for firewalld zone?

This is a multi-part message in MIME format. --------------030704060004040008010802 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi=2C Trying to add the ZONE field to the NIC=27s in oVirt as I=27m trying to use= Firewalld instead of iptables=2E Manually it works fine but when I try to set a custom property=2C it doesn=27t apply=2E http=3A//www=2Eovirt=2Eorg/Features/Network=5FCustom=5FProperties I can=27t figure out if this should work or I should use a different method= =2E Met vriendelijke groet=2C With kind regards=2C Jorick Astrego Netbulae Virtualization Experts=20 ---------------- =09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK= 08198180 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW= NL821234584B01 ---------------- --------------030704060004040008010802 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =3Chtml=3E =3Chead=3E =3Cmeta http-equiv=3D=22content-type=22 content=3D=22text/html=3B chars= et=3Dutf-8=22=3E =3C/head=3E =3Cbody bgcolor=3D=22=23FFFFFF=22 text=3D=22=23000000=22=3E Hi=2C=3Cbr=3E =3Cbr=3E Trying to add the ZONE field to the NIC=27s in oVirt as I=27m trying to= use Firewalld instead of iptables=2E=3Cbr=3E =3Cbr=3E Manually it works fine but when I try=C2=A0 to set a custom property=2C= it doesn=27t apply=2E=3Cbr=3E =3Cbr=3E =3Cblockquote=3E=3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22http= =3A//www=2Eovirt=2Eorg/Features/Network=5FCustom=5FProperties=22=3Ehttp=3A/= /www=2Eovirt=2Eorg/Features/Network=5FCustom=5FProperties=3C/a=3E=3Cbr=3E= =3Cbr=3E =3C/blockquote=3E I can=27t figure out if this should work or I should use a different method=2E=3Cbr=3E =3Cbr=3E =3Cbr=3E =3Cbr=3E =3Cbr=3E =20= =3CBR /=3E =3CBR /=3E =3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cspan style=3D=22c= olor=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan style=3D=22= mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelijke groet= =2C With kind regards=2C=3Cbr=3E=3Cbr=3E=3C/span=3EJorick Astrego=3C/font= =3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=3Cbr=3ENetbul= ae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3B= border-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 522px=22= =3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px= =22=3ETel=3A 053 20 30 270=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bf= ont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E =3Ctd style=3D=22wid= th=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E =3Ctd sty= le=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=3E=3C/tr= =3E=3Ctr=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EFax= =3A 053 20 30 271=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size= =3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E =3Ctd style=3D=22width=3A 130= px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E =3Ctd style=3D=22w= idth=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=3C/tr=3E= =3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bborder-top= =3A1px solid =23ccc=3B=22=3E=3CBR /=3E =3C/body=3E =3C/html=3E --------------030704060004040008010802--

Hi Jorick, I am not sure that Network_Custom_Properties is what you are looking for. With network custom properties you can only configure bridge or ethtool opts. So bridge opts doesn't suit you as it is only for specific configuration of the bridge on the specific NIC and with ethtool you don't configure firewall as well, unless there is a command that I am not familiar with. Regards, Genadi ----- Original Message ----- From: "Jorick Astrego" <j.astrego@netbulae.eu> To: users@ovirt.org Sent: Friday, May 8, 2015 1:24:46 PM Subject: [ovirt-users] using Network_Custom_Properties for firewalld zone? Hi, Trying to add the ZONE field to the NIC's in oVirt as I'm trying to use Firewalld instead of iptables. Manually it works fine but when I try to set a custom property, it doesn't apply. http://www.ovirt.org/Features/Network_Custom_Properties I can't figure out if this should work or I should use a different method. Met vriendelijke groet, With kind regards, Jorick Astrego Netbulae Virtualization Experts Tel: 053 20 30 270 info@netbulae.eu Staalsteden 4-3A KvK 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW NL821234584B01 _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

On Sun, May 10, 2015 at 03:18:08AM -0400, Genadi Chereshnya wrote:
Hi Jorick,
I am not sure that Network_Custom_Properties is what you are looking for. With network custom properties you can only configure bridge or ethtool opts. So bridge opts doesn't suit you as it is only for specific configuration of the bridge on the specific NIC and with ethtool you don't configure firewall as well, unless there is a command that I am not familiar with.
Regards, Genadi
----- Original Message ----- From: "Jorick Astrego" <j.astrego@netbulae.eu> To: users@ovirt.org Sent: Friday, May 8, 2015 1:24:46 PM Subject: [ovirt-users] using Network_Custom_Properties for firewalld zone?
Hi,
Trying to add the ZONE field to the NIC's in oVirt as I'm trying to use Firewalld instead of iptables.
Manually it works fine but when I try to set a custom property, it doesn't apply.
http://www.ovirt.org/Features/Network_Custom_Properties
I can't figure out if this should work or I should use a different method.
When you add a "zone" custom property to the network, you should also add something in Vdsm to handle it. This something is usually a hook script, possibly the after_network_setup one. There, you could edit the ifcfg file, and take it up again. This would be a bit cumbersome and slow. Alternatively, you can modify vdsm's ifcfg.py configurator to include this "zone". Regards, Dan.
participants (3)
-
Dan Kenigsberg
-
Genadi Chereshnya
-
Jorick Astrego