Re: Network interface element not working

On 4/4/22 2:08 PM, Ian Pilcher wrote: That's not what the <interface> element in a <network> is used for. It's actual use is (in my opinion) not all that useful, which has led to people assuming other functionality for it that doesn't exist. The *actual* use of the <interface> element is simply to add an extra iptables rule that will drop all traffic originating from a guest and outbound to the real network if the interface it uses for egress doesn't match the one listed in the <interface> element. It doesn't attach this egress interface to the network's bridge, and it doesn't modify the next-hop routing of the traffic (which is the more common mistaken belief of its function). Anyway, if you want to have a bridge device that is directly attached to a physical ethernet, then you should set up a bridge in the host OS outside the scope of libvirt, with the physical ethernet attached to it, and then configure your libvirt guests to use that bridge with, e.g. <interface type='bridge'> <source bridge='br0'/> ...