Re: [dc] draft-khasnabish-vmmi-problems-00.txt

[Melinda Shore <[e-mail]>]

On 1/19/12 7:26 PM, Ashish Dalela (adalela) wrote:
>Bandwidth needs, but they have the
> same tunnel. How do I distinguish between them based on the tunnel? In
> fact, if the tenant isolation is in the hypervisor, then the underlying
> network has no clue which tenant needs what policy.

Well, that's not true.  In the case of IPSec we've got SPIs, and
there are similar demultiplexing mechanisms in other technologies.

But frankly I think that if you're going to distinguish between
tunnel endpoints in the hypervisor and tunnel endpoints in other
sorts of network devices I think you're going to be somewhat
hard-pressed to make the case for working on the former in
the IETF.

Melinda