openstack team mailing list archive

[Vishvananda Ishaya <vishvananda@xxxxxxxxx>]

On Feb 4, 2013, at 2:29 AM, Joe Warren-Meeks <joe.warren.meeks@xxxxxxxxx> wrote:

> Hi guys,
> 
> I need to have arp and mac spoofing work on my virts so that HA works as I need it.
> 
> I've used virsh nwfilter-edit nova-base to edit and remove the bits I need,
> however it looks like that change was undone when the server was dist-upgraded
> 
> What is the proper way to make these changes permanent?


You could redefine nova-base in the code here:

nova/virt/libvirt/firewall.py

You could also change the line:

123         if pipelib.is_vpn_image(instance['image_ref']):

to:

123         if True:

which will cause all instances to get nova-vpn instead of nova base which
allows spoofing.

Vish

> 
> Kind regards
> 
>  -- joe.
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp