3 ms·
I wonder if there are any security implications to consider, particularly in a multi-tenant environment, when caching routing information for the "same" connect
by chatmasta 3y ago
I wonder if there are any security implications to consider, particularly in a multi-tenant environment, when caching routing information for the "same" connection.
- furkansahin 3y agoIn this case, no. The reason is, we setup separate network namespaces per VM and the flowtables are also created separately per namespace.
- BikiniPrince 3y agoSorta, you are using hardware offload at a level above the vm. There are a lot of situations in which traffic can interact poorly with that nic. You won’t really be able to identify what traffic resulted in the nic responding because of a bug. I’m assuming you are not using sr-iov vf devices if you are managing offload at the parent. Probably for the best if it is that card.