Re: [Xen-users] ebtables support in XCP 1.1

[brooks@xxxxxxxxxxx]

Found these in /etc/sysctl.conf:

# Disable *tables rules for bridge traffic to increase performance
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-arptables = 0

Can anyone verify that those are the correct options to change to enable
ebtables?  The note concerning performance is concerning.  Does anyone 
have any idea what sort of performance hit you're going to see if you 
enable ebtables?  What version of ebtables userland tools would be 
appropriate to install?  The default repo:
        http://updates.vmd.citrix.com/XCP/1.1.0/domain0/

doesn't exist.  Would the current version from CentOS 5.x

        ebtables-2.0.9-5.el5.i386
        Ethernet Bridge frame table administration tool

work as expected?  Once we work this out I'll put the info up on the wiki.

On Mon, 17 Oct 2011, brooks@xxxxxxxxxxx wrote:

> From:
>
> http://blog.xen.org/index.php/2011/09/23/xcp-1-1-rc1/
>
> ------------------------------------------------------------------------
> For OpenStack and others, support for ebtables and other netfilter
> options have been added to the kernel. These options have been disabled
> by default, but can be re-enabled with simple sysctl commands. These are
> the same kernel changes that will be included in the upcoming XenServer
> 6.0 release.
> ------------------------------------------------------------------------
>
> How do you enable support for ebtables in XCP 1.1?
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users