The following series of patches is a prototype implementation of a ebtables based MAC
address filter. I hope to have addressed all the previous comments.
At the moment, some defaults are set when libvirtd starts and when a domain is started or
destroyed. The plan is to extend this filter capability to the API level and virsh command
level. The plan is also to add more filtering features like VLAN filtering and QoS
filtering.
Thanks, Gerhard
---
Gerhard Stenzel (2):
add MAC address based port filtering to qemu
add ebtables wrapper
configure.in | 3
po/POTFILES.in | 1
src/Makefile.am | 5
src/libvirt_private.syms | 7 +
src/qemu/qemu.conf | 2
src/qemu/qemu_bridge_filter.c | 108 ++++++++++
src/qemu/qemu_bridge_filter.h | 39 ++++
src/qemu/qemu_conf.c | 25 ++
src/qemu/qemu_conf.h | 4
src/qemu/qemu_driver.c | 16 +
src/util/ebtables.c | 441 +++++++++++++++++++++++++++++++++++++++++
src/util/ebtables.h | 65 ++++++
12 files changed, 715 insertions(+), 1 deletions(-)
create mode 100644 src/qemu/qemu_bridge_filter.c
create mode 100644 src/qemu/qemu_bridge_filter.h
create mode 100644 src/util/ebtables.c
create mode 100644 src/util/ebtables.h
--
Best regards,
Gerhard Stenzel,
-----------------------------------------------------------------------------------------------------------------------------------
IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Erich Baier
Sitz der Gesellschaft: Böblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294