Nested virtualization with basic networking

[rp-]

As far as I found out, the default guest network set up some IP filtering, so you can't get to nested VM's because they simple don't get any ARP/IP requests (even the security group is opened).

Is there some setting in basic networking so you could access nested VM's or disable this ip filters?

[DaanHoogland]

not sure @rp- , but can you use shared networks with sec-groups in an advvanced zone instead?

[weizhouapache]

it is by design

If you do not want the rules, you can change the script /usr/share/cloudstack-common/scripts/vm/network/security_group.py on kvm host.
for example, add return as the first line of some methods so nothing will be configured.

[rp-]

yes that worked, Thanks Wei.

Would be cool if this could be some host/cluster option, to disable it.

[weizhouapache]

thanks @rp- for the update
good to know it worked

[weizhouapache]

@rp-
can you add a feature request with mode details (user case, expectation, thoughts etc) ?

[rp-]

done here: #10286