OpenVZ Forum - RDF feed
type: channel
items: (Solved) Isolation of nodes from each other .....
items: Re: Isolation of nodes from each other .....

(Solved) Isolation of nodes from each other .....
type: item
description: Hello I was thinking about the best way to isolate nodes from each other. Using VENET my nodes can ping each other and even the HN. How do I avoid this? /Allan
creator: schjeall
date: 2009-03-19T07:18:37-00:00

Re: Isolation of nodes from each other .....
type: item
description: iptables?
creator: kir
date: 2009-03-19T13:03:44-00:00

Re: Isolation of nodes from each other .....
type: item
description: Hello Yes, IPTABLES ahh, stupid me ;O) Sorry, for my bad formulated question. I'm aware of IPTABLES, but what I'm looking for is a solution where the individual nodes, without local IPTABLES configuration, are isolated. Can this be handled at the HN? Each node can reach the internet and the internet can reach nodes, but not other nodes or the HN. And as mention, no configuration on the nodes, noly HN. Any examples, link to guides are welcome.
creator: schjeall
date: 2009-03-19T13:30:29-00:00

Re: Isolation of nodes from each other .....
type: item
description: I meant iptables rules on the HN. Sorry I'm busy to test below examples... Drop VE->HN traffic with iptables -A INPUT -s x.x.x.x/nn -d y.y.y.y -j DROP where x.x.x.x/nn is a network from which you allocate IPs for contaners, and y.y.y.y is HN IP. Drop VE->VE traffic with iptables -A FORWARD -s x.x.x.x/nn -d x.x.x.x/nn -j DROP where x.x.x.x/nn is a network from which you allocate IPs for contaners
creator: kir
date: 2009-03-19T14:21:27-00:00

Re: Isolation of nodes from each other .....
type: item
description: Hello You are genius. Thank you so much. The rules looks really simple and I can't wait to try your proposal. /Allan
creator: schjeall
date: 2009-03-19T14:30:20-00:00