[libvirt] [RFC] Proposal for introduction of network traffic filtering capabilities for filtering of network traffic from and to VMs

[Stefan Berger]

Matthias Bolte <matthias.bolte at googlemail.com> wrote on 02/18/2010 
09:15:47 AM:


> > thus we would rewrite the above example to:
> >
> > <domain type='kvm'>
> >  <name>demo</name>
> >  <memory>256000</memory>
> >  <devices>
> >    <interface type="bridge">
> >      <filter name='demofilter' att0='IP' val0='10.0.0.1'/>
> >    </interface>
> >  </devices>
> > </domain>
> > This allows us to pass any necessary parameters to the filters for
> > instantiation in
> > the respective environment. So, if a filter is to be instantiated and 
holds
> > the variable
> > XYZ, then one may add
> >
> > att1='XYZ' val1='<some value>'
> 
> Passing parameters this way seems a bit unexpected for XML. How about
> something like this:
> 
> <interface type="bridge">
>   <filter name='demofilter'>
>     <parameter name='IP' value='10.0.0.1'/>
>   </filter>
> </interface>


Also a possibility...

  Stefan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20100218/cca5ce54/attachment-0001.htm>