apache / apache/cloudstack

An Config option to simply allow nested VM access

Open
#10,286 5 comments 0 reactions 0 assignees View on GitHub
component:basic-network component:nested-hypervisor component:security-group no-issue-activity
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

### The required feature described as a wish

As asked in this discusssion: https://github.com/apache/cloudstack/discussions/10225

I would like to have an easier way to allow network traffic to nested VM's in basic networking installations.

Currently you would need to manually "hack" the `security_group.py` script to just not execute anything at all.
This would be useful for inhouse non security sensitive installation where people could simply host e.g. test CloudStack installations
or other virtualization platforms to test.

Contributor guide

Open the contributing guide

Research direction

Start with the linked discussion and the security_group.py script to understand the requested behavior and current traffic handling. Define how a configuration option should allow nested VM traffic in basic networking without modifying the script, then verify the option works for the described test CloudStack setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, python
Domain
cloud, infrastructure, networking
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.