<html><head></head><body>you can configure openvswitch to drop the pkts if the mac address and/or<br>
ip does not match. or you can use an SDN controller which will do it for<br>
you<br>
<br>
<a href="http://openvswitch.org/pipermail/discuss/2011-May/005112.html">http://openvswitch.org/pipermail/discuss/2011-May/005112.html</a> for an<br>
example how to do it manually<br>
<br><br><div class="gmail_quote">On June 26, 2015 11:59:04 AM GMT+08:00, Benoit GEORGELIN - Association Web4all <benoit.georgelin@web4all.fr> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>Hi, </div><div><br data-mce-bogus="1" /></div><div>I'm looking to avoid network changes in an LXC container with root access while the system is up and running. </div><div><br data-mce-bogus="1" /></div><div>Let's say I have two containers running.</div><div><br data-mce-bogus="1" /></div><div>A: 192.168.0.100/24</div><div>B: 192.168.0.200/24</div><div><br data-mce-bogus="1" /></div><div>They are both on the same private network but it can be a public network too. </div><div>How can I prevent root user from container B to change his IP address and user the IP address of container A ?</div><div><br data-mce-bogus="1" /></div><div>Container network is built on top of Ovs Switch . Maybe there is a way to restrict MAC Address and IP for a specific port ? I did not see any option. </div><div><br />Thanks for you advises ! </div><div><br /></div><div
data-marker="__SIG_PRE__"><div><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif;">Cordialement,</span><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><span style="color: rgb(51, 51, 51); font-family: times new roman,new york,times,serif; font-weight: bold;" data-mce-style="color: #333333; font-family: times new roman,new york,times,serif; font-weight: bold;"><br /></span></span></div><div>Benoit G</div></div></div><p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />lxc-users mailing list<br />lxc-users@lists.linuxcontainers.org<br /><a
href="http://lists.linuxcontainers.org/listinfo/lxc-users">http://lists.linuxcontainers.org/listinfo/lxc-users</a></pre></blockquote></div><br>
-- <br>
1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333<br>
<br>
Sent from mobile.</body></html>