Multiple bhyve Guests, Single bridge/tap?

[Aryeh Friedman]

On Thu, Dec 29, 2016 at 10:19 AM, Vincent Olivier <vincent at up4.com> wrote:

> Hi!
>
> > Use the same bridge but a different tap (each tap represents the virtual
> equivalent of a NIC where the bridge is the virtual equivalent of a hub)
>
>
> Thanks! This is very clear. For extra isolation, could I use a new bridge
> too or is that useless?
>

Yes but it only makes sense in a multi-tenant (aka cloud provider) setup
because any attacker on a VM should be assumed to able to get into the host
due to knowing your password (which typically is not all that different on
the two machines unless you randomly generated it).

-- 
Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org