(Solved) Isolation of nodes from each other .....
Hello I was thinking about the best way to isolate nodes from each other. Using VENET my nodes can ping each other and even the HN. How do I avoid this? /Allan
Re: Isolation of nodes from each other .....
Hello Yes, IPTABLES ahh, stupid me ;O) Sorry, for my bad formulated question. I'm aware of IPTABLES, but what I'm looking for is a solution where the individual nodes, without local IPTABLES configuration, are isolated. Can this be handled at the HN? Each node can reach the internet and the internet can reach nodes, but not other nodes or the HN. And as mention, no configuration on the nodes, noly HN. Any examples, link to guides are welcome.
I meant iptables rules on the HN. Sorry I'm busy to test below examples... Drop VE->HN traffic with iptables -A INPUT -s x.x.x.x/nn -d y.y.y.y -j DROP where x.x.x.x/nn is a network from which you allocate IPs for contaners, and y.y.y.y is HN IP. Drop VE->VE traffic with iptables -A FORWARD -s x.x.x.x/nn -d x.x.x.x/nn -j DROP where x.x.x.x/nn is a network from which you allocate IPs for contaners
Hello You are genius. Thank you so much. The rules looks really simple and I can't wait to try your proposal. /Allan