[Devel] Filter container traffic

[cheetah]

Hi Guys,


I just setup my openvz environment. What I need to do now is to write a
firewall to check each flow from container and decide if it is allowed.

I noticed that for each container there is vmnet device. I am wondering can
I use open vswitch with this vmnet device? (It seems not from what is
mentioned here http://wiki.openvz.org/Virtual_network_device). If not, does
that mean I have to use netfilter/contrack/iptables to implement my
firewall? Could you please recommend some tutorials/readings?

Thanks a lot!

Regards,
Peter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openvz.org/pipermail/devel/attachments/20120619/69cd3486/attachment-0001.html>