Comments (2)
@yxh4n will the two NICs be connected to different external Ethernet networks? If not, do you have a drawing showing the intended IP addresses and communication paths? (Need to understand whether you might accidentally create a L2 loop resulting in broadcast storms, or you intent to have use link aggregation, or something else for those two NICs.)
For the simpler case of one NIC connected to an external Ethernet network (or two NICs connected to two separate external Ethernet network), you define a switch network instance (or two if two NICs), and then for the app instances which use this you define IP-level ACLs. If you want all traffic to pass you specify an ACL for 0.0.0.0/0. But you can also specify different IP ranges and TCP/UDP ports to allow.
from eve.
RE: will the two NICs be connected to different external Ethernet networks?
Yes.
RE: If you want all traffic to pass you specify an ACL for 0.0.0.0/0
Yes. It took me a while to figure out how to do this using Zededa web UI. What made it difficult to discover was that we started with no ACL for App-Shared. Most solutions I have used so far does not have ACLs for virtual switch (Hyper-V and VMware). Azure VMs/networking is a different story.
When we did add ACE and update the instance - it was erroring out. It took us very long time to realize that if we have the ACE already defined in ECI (EVE Container Instance?) in the Outbound - then deploy works.
I was not expecting to do the ACE in the Outbond in Zededa web UI (because I was thinking inbound/outbond rules).
Anyway, I am wondering if there is a way to do it via cli?
from eve.
Related Issues (20)
- procps doesn't exist for riscv so the build fails HOT 2
- Use sbom-scorecard in GH action to catch regressions? HOT 4
- Need way to manually re-trigger assets workflow HOT 5
- usbmanager golang panic: missing checks for nil return from ioBundle2PassthroughRule?
- Uniform Usage of Directory Path Constants Across EVE Codebase
- Loss of content tree image type for container downloaded but not loaded during reboot HOT 18
- Question related to available hypervisors HOT 1
- Optimize pillar/zedbox memory usage
- fTPM on ARM HOT 1
- Replace (part of) kvm/qemu with firecracker/rust-vmm
- Try kata containers with k3s
- Observable memory usage in kvm/qemu to predict OOM HOT 1
- App PCIe passthrough should deny takeover of zfs owned devices
- Integration of tee-utils and tee-supplicant daemon
- Add more DTB overlays to Raspberry PI
- Get more information about the hardware and sensors as well
- Live image doesn't boot when EVE-OS is installed on another storage device
- Add some local commands to be used by local administrators HOT 1
- Request: Add Container-Name in Prompt for all our service containers similar to pillar
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from eve.