HI! I'm currently reviewing my (functional) setup with one physical ethernet interface eth1 of the host system being connected to a VDSL modem (not router!). A fully virtualized guest acts as router with this source mode: <source dev='eth1' mode='bridge'/> Reading the docs [1] I'm thinking whether mode='private' would be a better choice because the network packets are supposed to be sent exclusively to the VDSL modem and received from there. Any thoughts? Ciao, Michael. [1] https://libvirt.org/formatdomain.html#elementsNICSDirect