Network without uplink?

In vmware I can create a virtual switch without uplink, effectively physically isolating all vm’s connected to that vSwitch (on that single node)

  • I dont understand howto create something similar with Harvester

basically I want to create a emulated “LAN” - where a “firewall/proxy” (vm) will sit that is connected to both this closed virtual switch - and another vswitch with uplink and internet connectivity.

the idea is that the LAN traffic should never leave the node or even a hit a physical network card.

any insights would be helpful

With v1.6.0 we have the experimental kubeovn-operator add-on. You might have a look into this. See https://github.com/harvester/harvester/issues/7381 also.