The following series of patches is a prototype implementation of a ebtables based MAC address filter. I hope to have addressed all the previous comments.
At the moment, some defaults are set when libvirtd starts and when a domain is started or destroyed. The plan is to extend this filter capability to the API level and virsh command level. The plan is also to add more filtering features like VLAN filtering and QoS filtering.
Thanks, Gerhard
---
Gerhard Stenzel (2):
add MAC address based port filtering to qemu
add ebtables wrapper
configure.in | 3
po/POTFILES.in | 1
src/Makefile.am | 5
src/libvirt_private.syms | 7 +
src/qemu/qemu.conf | 2
src/qemu/qemu_bridge_filter.c | 108 ++++++++++
src/qemu/qemu_bridge_filter.h | 39 ++++
src/qemu/qemu_conf.c | 25 ++
src/qemu/qemu_conf.h | 4
src/qemu/qemu_driver.c | 16 +
src/util/ebtables.c | 441 +++++++++++++++++++++++++++++++++++++++++
src/util/ebtables.h | 65 ++++++
12 files changed, 715 insertions(+), 1 deletions(-)
create mode 100644 src/qemu/qemu_bridge_filter.c
create mode 100644 src/qemu/qemu_bridge_filter.h
create mode 100644 src/util/ebtables.c
create mode 100644 src/util/ebtables.h
--
Best regards,
Gerhard Stenzel,
-----------------------------------------------------------------------------------------------------------------------------------
IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Erich Baier
Sitz der Gesellschaft: Böblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294
--
Libvir-list mailing list
Libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list