On 02/16/2018 01:44 PM, Andre Goree wrote: > On 2018/02/16 12:12 pm, Daniel P. Berrangé wrote: >> On Fri, Feb 16, 2018 at 11:59:42AM -0500, Andre Goree wrote: >>> I'm trying to determine if it's possible to edit/attach/apply >>> nwfilter rules >>> at runtime? I.e., after a VM is already running, can I apply a >>> nwfilter to >>> the VM and have it work without rebooting the machine? Thus far, >>> I've not >>> come across a way to do so, but I thought I'd ask here before I chase my >>> tail around Google. >> >> Simply re-define the nwfilter in question using virsh nwfilter-define. >> Any VMs using that filter will automatically update. >> >> >> Regards, >> Daniel >> -- >> |: https://berrange.com ; -o- >> https://www.flickr.com/photos/dberrange :| >> |: https://libvirt.org ; -o- >> https://fstop138.berrange.com :| >> |: https://entangle-photo.org ; -o- >> https://www.instagram.com/dberrange :| > > > Thank you for the quick reply. > > As for adding the nwfilter to a guest that does not already have the > filter, will that guest need to be rebooted? Or can I add it to the > guest via 'virsh edit'? > I ask becase, from what I can tell, adding a new filter via 'virsh edit' > doesn't seem to work -- Changes made with virsh edit don't take effect until the domain has been completely stopped and restarted. However, you can make some changes take effect immediately by using "virsh update-device" with the --live option (be sure to also specify --config if you want the change to still be there the next time the domain is started. > though it's good to know that once a 'filterref' > has been defined in the guest, it can be adjusted on the fly. > _______________________________________________ libvirt-users mailing list libvirt-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvirt-users
