[libvirt] FYI: a short guide to libvirt & network filtering iptables/ebtables use

[Stefan Berger]

On 06/30/2010 11:04 AM, Daniel P. Berrange wrote:
>
> One thing in looking at this that you may notice is that if there
> are many guests all using the same filters, we will be duplicating
> the iptables rules over&  over for each guest. This is merely a
>    
One comment here: An optimization would be (easier, if at all) 
implementable if there was no priority field in the rules that allows 
the rules of different filters to be interleaved with each other.

    Stefan