Skip to content

Commit bd9df49

Browse files
committed
OSDOCS-14170: Created doc for enabled port isolation Linux bridge CNI CNV
1 parent f08c932 commit bd9df49

File tree

2 files changed

+61
-0
lines changed

2 files changed

+61
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * virt/vm_networking/virt-connecting-vm-to-linux-bridge.adoc
4+
5+
:_mod-docs-content-type: PROCEDURE
6+
[id="virt-linux-bridge-nad-port-isolation.adoc_{context}"]
7+
= Enabling port isolation for a Linux bridge NAD
8+
9+
You can enable port isolation for a Linux bridge network attachment definition (NAD) so that virtual machines (VMs) that run on the same node can operate in isolation from each other. This mechanism works by isolating specific ports from communicating with each other but still allows ports to communicate with non-isolated ports. Isolating ports in this way can provide enhanced security, efficient resource use, and performance improvements for each VM that runs on a node.
10+
11+
.Prerequisites
12+
13+
* You created Linux bridge NAD by using either the web console or the command-line interface.
14+
15+
.Procedure
16+
17+
18+
19+
20+
21+
22+
23+
. Add the bridge interface and the network attachment definition to the VM configuration as in the following example:
24+
+
25+
[source,yaml]
26+
----
27+
apiVersion: kubevirt.io/v1
28+
kind: VirtualMachine
29+
metadata:
30+
name: example-vm
31+
spec:
32+
template:
33+
spec:
34+
domain:
35+
devices:
36+
interfaces:
37+
- bridge: {}
38+
name: bridge-net <1>
39+
# ...
40+
networks:
41+
- name: bridge-net <2>
42+
multus:
43+
networkName: a-bridge-network <3>
44+
----
45+
<1> The name of the bridge interface.
46+
<2> The name of the network. This value must match the `name` value of the corresponding `spec.template.spec.domain.devices.interfaces` entry.
47+
<3> The name of the network attachment definition.
48+
49+
. Apply the configuration:
50+
+
51+
[source,terminal]
52+
----
53+
$ oc apply -f example-vm.yaml
54+
----
55+
56+
. Optional: If you edited a running virtual machine, you must restart it for the changes to take effect.

virt/vm_networking/virt-connecting-vm-to-linux-bridge.adoc

+5
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,15 @@ include::modules/virt-creating-linux-bridge-nncp.adoc[leveloffset=+1]
2626

2727
You can create a Linux bridge network attachment definition (NAD) by using the {product-title} web console or command line.
2828

29+
// Creating a Linux bridge NAD by using the web console
2930
include::modules/virt-creating-linux-bridge-nad-web.adoc[leveloffset=+2]
3031

32+
// Creating a Linux bridge NAD by using the command line
3133
include::modules/virt-creating-linux-bridge-nad-cli.adoc[leveloffset=+2]
3234

35+
// Enabling port isolation for a Linux bridge NAD
36+
include::modules/virt-linux-bridge-nad-port-isolation.adoc[leveloffset=+2]
37+
3338
[id="configuring-vm-network-interface"]
3439
== Configuring a VM network interface
3540

0 commit comments

Comments
 (0)