Ask Your Question

Revision history [back]

the security rules are getting applied directly onto br-int (which is not yet compatible with iptables rules). Going forward there would be a firewall driver which could leverage OpenFlow and inject the rules directly into the OVS bridge.