On 02/16/2018 01:44 PM, Andre Goree wrote:
On 2018/02/16 12:12 pm, Daniel P. Berrangé wrote:
On Fri, Feb 16, 2018 at 11:59:42AM -0500, Andre Goree wrote:
I'm trying to determine if it's possible to edit/attach/apply nwfilter rules at runtime? I.e., after a VM is already running, can I apply a nwfilter to the VM and have it work without rebooting the machine? Thus far, I've not come across a way to do so, but I thought I'd ask here before I chase my tail around Google.
Simply re-define the nwfilter in question using virsh nwfilter-define. Any VMs using that filter will automatically update.
Regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|
Thank you for the quick reply.
As for adding the nwfilter to a guest that does not already have the filter, will that guest need to be rebooted? Or can I add it to the guest via 'virsh edit'? I ask becase, from what I can tell, adding a new filter via 'virsh edit' doesn't seem to work --
Changes made with virsh edit don't take effect until the domain has been completely stopped and restarted. However, you can make some changes take effect immediately by using "virsh update-device" with the --live option (be sure to also specify --config if you want the change to still be there the next time the domain is started.
though it's good to know that once a 'filterref' has been defined in the guest, it can be adjusted on the fly.