[ovs-discuss] MAC Antispoof OVS Builtin

Luiz Ozaki luiz.ozaki at locaweb.com.br
Tue Mar 13 17:36:34 UTC 2012


Hi,

I'm doing antispoof using OpenFlow here, but, is there any MAC/IP 
antispoof in OpenVSwitch that is builtin ?

How can I prevent one VM to get other VM MAC and IP and start using the 
network ?

I'm planning to put a controller to manage our flows, but since it'll 
became a single "domain" of switches, any VM managed by that controller 
could put others MAC/IP and start faking another VM.

I could to a MAC match IP, but if someone discover the MAC-IP relation, 
those traffic could be faked ?

Any approach to prevent that ?


-- 
Luiz Henrique Ozaki

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20120313/5b13bf73/attachment-0001.html>


More information about the discuss mailing list