Can you create ACLs with open vSwitch on XenServer 5.6FP1 without using the DVS appliance?

Posted by bwizzy on Server Fault See other posts from Server Fault or by bwizzy
Published on 2011-01-10T18:42:42Z Indexed on 2011/01/10 18:55 UTC
Read the original article Hit count: 272

Filed under:

xenserver

|

dvswitch

I have a pool of XenServer hosts running the Free version of XenServer 5.6 FP1. I was wondering if I change the network backend to use Open vSwitch if I can specify ACLs on individual network VIFs without needing to use the DVS appliance (distributed virtual switch) which requires an Advanced License or higher.

Basically I'm looking for a way to isolate VMs on my network so that if a user had root access on the command line they couldn't access other servers they should not be able to (without using a VLAN).

© Server Fault or respective owner

Related posts about xenserver

iSCSI, failover and XenServer

as seen on Server Fault - Search for 'Server Fault'
I have an iSCSI fail over implementation setup so if one of my storage units fails the other takes over immediately (it also runs the NFS shares). When fail over occurs, volumes are exported, the IP is switched to the other machine and the targets are reconfigured. The fail over of the storage system… >>> More
xenserver 5.5 windows guest

as seen on Server Fault - Search for 'Server Fault'
xenserver 5.5 update2 running on Pentium-D without VT. says it cant support Windows guests(HVM not found etc) on the same CPU ESXi 4 installed and runs Win XP fine. any thoughts? thanks in adv. >>> More
XenServer 5.5 Error adding additional Server to Ressource Pool

as seen on Server Fault - Search for 'Server Fault'
I'm running Citrix XenServer 5.5 as a testsetup, with Openfiler providing Storage via NFS. I tried to setup a Ressource Pool to test Live migration but I'm unable to a my 2. Server to the Pool. It fails after about 10sec with the Error: 4/26/2010 2:54:52 PM Error: Adding server 'u-173-c047.XXX.XXX'… >>> More
Dedicated server configuration - some tips -Xenserver/Debian

as seen on Server Fault - Search for 'Server Fault'
I am migrating from a vps based hosting to a dedicated hosting (8GB RAM/1TB HD). I need to run multiple Drupal and Ruby based applications? what would be the recommended configuration. I was thinking of two options. 1) Install multiple Debian os on top of Xen (like VPS). Each may be 2GB Memory and… >>> More
Boot xen server through ipxe

as seen on Server Fault - Search for 'Server Fault'
I'm want install Xen Server 6.2 though ipxe, I tried different configurations, no luck making to work until now. I found some may example to boot from pxe using TFTP server, and here is an example: default xenserver-auto label xenserver-auto kernel mboot.c32 append xenserver/xen.gz dom0_max_vcpus=1-2… >>> More

Related posts about dvswitch

faking NAT with a VMware distributed switch across multiple hosts

as seen on Server Fault - Search for 'Server Fault'
I need to construct a NAT for certain machines within the network. Wish to do this with dvSwitch - as it seems the logical way of attacking the problem as in this scenario there's just under 30 hosts. In order for the NAT'ed VM's to have access to the 'real' network. I am providing a 'router' VM… >>> More
faking NAT with a VMware distributed switch across multiple hosts

as seen on Server Fault - Search for 'Server Fault'
Have a VM that will act as the router, and will be connected to both networks (NAT + 'real'). I spread the distributed switch across the hosts, although any VM that is not on the same physical host as the router/dhcpd simply doesn't get an IP. So its obviously my dvSwitch config. Has anyone achieved… >>> More
Can you create ACLs with open vSwitch on XenServer 5.6FP1 without using the DVS appliance?

as seen on Server Fault - Search for 'Server Fault'
I have a pool of XenServer hosts running the Free version of XenServer 5.6 FP1. I was wondering if I change the network backend to use Open vSwitch if I can specify ACLs on individual network VIFs without needing to use the DVS appliance (distributed virtual switch) which requires an Advanced License… >>> More
Nexus 1000v VEM fails on 2 out of 8 hosts.

as seen on Server Fault - Search for 'Server Fault'
I have 8 ESXi hosts. I do a fresh install from the installable CD directly to 4u1. We have another 2-node cluster with a working Nexus 1000v primary & secondary. Everything's up and running. I installed 6 hosts and everything worked great, migrated them to the Nexus DVS, and VUM installed the… >>> More
vSphere ESX 5.5 hosts cannot connect to NFS Server

as seen on Server Fault - Search for 'Server Fault'
Summary: My problem is I cannot use the QNAP NFS Server as an NFS datastore from my ESX hosts despite the hosts being able to ping it. I'm utilising a vDS with LACP uplinks for all my network traffic (including NFS) and a subnet for each vmkernel adapter. Setup: I'm evaluating vSphere and I've got… >>> More