[Users] Re: [Devel] Filter container traffic

[Kir Kolyshkin]

On 06/19/2012 06:10 AM, cheetah wrote:
> Hi Guys,
>
>
> I just setup my openvz environment. What I need to do now is to write 
> a firewall to check each flow from container and decide if it is allowed.
>
> I noticed that for each container there is vmnet device. I am 
> wondering can I use open vswitch with this vmnet device? (It seems not 
> from what is mentioned here 
> http://wiki.openvz.org/Virtual_network_device). If not, does that mean 
> I have to use netfilter/contrack/iptables to implement my firewall? 
> Could you please recommend some tutorials/readings?

I guess most of what we have is available from here:
http://wiki.openvz.org/Category:Networking