March 2010 - Devel - libvirt List Archives

[libvirt] [APPENDIX] Sample filters
by Stefan Berger 18 Mar '10

18 Mar '10

Attached are some sample filter templates. Some of these should probably become available through libvirt repository later on as 'standard filters'. One may copy the XML files into /etc/libvirt/nwfilter or use 'virsh nwfilter-define <filename>' to make them known to libvirt. Using 'virsh nwfilter-list' one can then list the filters. The simpleloop.xml filter will not be accepted since it would directly introduce a loop. More complex loops are also detected. Regards, Stefan, Gerhard

1 0

[libvirt] [PATCH 13/14] Add IPv6 support for ebtables layer
by Stefan Berger 18 Mar '10

18 Mar '10

This patch adds IPv6 support for the ebtables layer. Since the parser etc. are all parameterized, it was fairly easy to add this... Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 12/14] Core driver implementation with ebtables support
by Stefan Berger 18 Mar '10

18 Mar '10

This patch implements the core driver and provides - management functionality for managing the filter XMLs - compiling the internal filter representation into ebtables rules - applying ebtables rules on a network (tap,macvtap) interface - tearing down ebtables rules that were applied on behalf of an interface - updating of filters while VMs are running and causing the firewalls to be rebuilt - other bits and pieces Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 11/14] Add qemu support
by Stefan Berger 18 Mar '10

18 Mar '10

Add support for Qemu to have firewall rules applied and removed on VM startup and shutdown respectively. This patch also provides support for the updating of a filter that causes all VMs that reference the filter to have their ebtables/iptables rules updated. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 10/14] Add XML parser extensions to the domain XML processing
by Stefan Berger 18 Mar '10

18 Mar '10

This patch extends the domain XML processing to parse the top level referenced filter along with potentially provided parameters and also converts the internal data back into XML representation. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com> Signed-off-by: Gerhard Stenzel <gerhard.stenzel(a)de.ibm.com>

1 0

[libvirt] [PATCH 9/14] Add virsh support for new CLI commands
by Stefan Berger 18 Mar '10

18 Mar '10

This patch adds virsh support for the five new CLI commands to manage network filters. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 8/14] Implementation of the RPC call dispatch
by Stefan Berger 18 Mar '10

18 Mar '10

This patch extends the RPC dispatcher to support the newly added RPC calls for network filtering (ACL) support. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 7/14] Implementation of the RPC client
by Stefan Berger 18 Mar '10

18 Mar '10

This patch extends the RPC client for the new network filtering (ACL) functionality. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 6/14] Definition of the wire format
by Stefan Berger 18 Mar '10

18 Mar '10

This patch adds the definition of the wire format for RPC calls for the new network filtering (ACL) functionality added to libvirt. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0

[libvirt] [PATCH 4/14] Add internal API
by Stefan Berger 18 Mar '10

18 Mar '10

This patch adds the internal API extensions for network filtering (ACL) support. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com>

1 0