Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bridge: Add an option to enable port isolation #1135

Open
ormergi opened this issue Jan 9, 2025 · 0 comments
Open

bridge: Add an option to enable port isolation #1135

ormergi opened this issue Jan 9, 2025 · 0 comments

Comments

@ormergi
Copy link
Contributor

ormergi commented Jan 9, 2025

Enable bridge CNI users set port-isolation [1] on the interface.

Linux-bridge port that is set as isolated cannot communicate with other isolated ports (they can still communicate with non-isolated ports).
For example:
In case I have two containers connected over a bridge (running on the same node), I want traffic to go though a smart switch, and the switch should decide whether these containers can communicate with each other according to some restrictions or policies.

Add new option should be an addition flag, controlling whether port-isolation is set on the interface or not.
Default should be false.

[1] https://serverfault.com/questions/388544/is-it-possible-to-enable-port-isolation-on-linux-bridges/1017228#1017228

@ormergi ormergi changed the title bridge: Add port isolation option bridge: Add an option to enable port isolation Jan 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant