for DMZ’s I would love to support private VLANs - meaning each VM can not communicate with any other system, except the router that does the upstream connection.
It is possible with OVS by adding some flows.
It would be nicest if I could basically configure this as a vnet property though.
Do you think it would be possible to do this WITH OpenNebula? How would I go about it?