]> git.ipfire.org Git - thirdparty/libvirt.git/commit
util: query/set BR_ISOLATED flag on netdevs attached to bridge
authorLaine Stump <laine@redhat.com>
Mon, 20 Jan 2020 21:27:02 +0000 (16:27 -0500)
committerLaine Stump <laine@redhat.com>
Fri, 21 Feb 2020 04:07:53 +0000 (23:07 -0500)
commita378d8fa55c121b5a3c1e575cd986adaa3671e3d
treeb6330a603781d6af96ce5fe38414dd8c73c94866
parent3f8b57a61fdc2f685a46f52fc794225615b0e38a
util: query/set BR_ISOLATED flag on netdevs attached to bridge

When this flag is set for an interface attached to a bridge, traffic
to/from the specified interface can only enter/exit the bridge via
another attached interface that *doesn't* have the BR_ISOLATED flag
set. This can be used to permit guests to communicate with the rest of
the network, but not with each other.

Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/libvirt_private.syms
src/util/virnetdevbridge.c
src/util/virnetdevbridge.h