Bug 1390469 - Network filter table should include more filters
Summary: Network filter table should include more filters
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: doc-Virtualization_Deployment_and_Administration_Guide
Version: 7.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Jiri Herrmann
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-01 07:11 UTC by Tahlia Richardson
Modified: 2019-03-06 00:37 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-10-02 15:35:22 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Tahlia Richardson 2016-11-01 07:11:15 UTC
Document URL: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Virtualization_Deployment_and_Administration_Guide/sect-Virtual_Networking-Applying_network_filtering.html#sect-Applying_network_filtering-Advanced_Filter_Configuration_Topics

Section Number and Name: 19.14.11.4. Pre-existing network filters

Describe the issue: The table describing libvirt's default filters includes 6 filters. However, the Network Filter list in RHV's UI includes many more filters (see https://bugzilla.redhat.com/show_bug.cgi?id=1377181#c10 for details). Since these are libvirt filters that RHV just exposes, the table in this section should be expanded rather than duplicating the content in the RHV docs. 

Suggestions for improvement: Include additional filters in filter description table (maybe not vdsm-no-mac-spoofing; I think that is RHV-specific).

Additional information:

Comment 6 Dan Kenigsberg 2016-11-07 08:00:27 UTC
indeed, vdsm-no-mac-spoofing is RHV-specific. But beside it, I suppose that Karen (or someone from her team) can tell which of the nwfilters shipped with libvirt are supported by RHEL and need documentation.

Comment 12 Laine Stump 2017-07-21 16:05:56 UTC
I would combine the no-arp-spoofing, no-arp-mac-spoofing, and no-arp-ip-spoofing rules as you did for the qemu-self-announce rules. Other than that, it looks fine.


Note You need to log in before you can comment on or make changes to this bug.