GuestProgrammableMacVlanFiltering - Revision history

Bsd: Add categories

2015-05-16T20:51:14Z

Add categories

← Older revision		Revision as of 16:51, 16 May 2015
Line 26:		Line 26:

	* Amos Kong works on QEMU side [http://git.qemu.org/?p=qemu.git;a=commit;h=b1be42803b31a913bab65bab563a8760ad2e7f7f] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.		* Amos Kong works on QEMU side [http://git.qemu.org/?p=qemu.git;a=commit;h=b1be42803b31a913bab65bab563a8760ad2e7f7f] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.

			[[Category:TODO]][[Category:Docs]][[Category:Networking]]

Kongove at 05:24, 30 October 2013

2013-10-30T05:24:45Z

← Older revision		Revision as of 01:24, 30 October 2013
Line 25:		Line 25:
	QEMU:		QEMU:

	* Amos Kong works on QEMU side [~~https~~://git.~~kernel~~.org/~~cgit/virt/kvm/mst/~~qemu.git~~/patch/?id~~=~~1c0fa6b709d02fe4f98d4ce7b55a6cc3c925791cl~~] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.		* Amos Kong works on QEMU side [http://git.qemu.org/?p=qemu.git;a=commit;h=b1be42803b31a913bab65bab563a8760ad2e7f7f] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.

Kongove at 07:40, 24 June 2013

2013-06-24T07:40:07Z

← Older revision		Revision as of 03:40, 24 June 2013
Line 25:		Line 25:
	QEMU:		QEMU:

	* Amos Kong works on QEMU side [~~http~~://~~lists~~.~~nongnu~~.org/~~archive~~/~~html~~/qemu~~-devel~~/~~2013-06~~/~~msg00658.html~~] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.		* Amos Kong works on QEMU side [https://git.kernel.org/cgit/virt/kvm/mst/qemu.git/patch/?id=1c0fa6b709d02fe4f98d4ce7b55a6cc3c925791cl] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.

Kongove at 11:59, 5 June 2013

2013-06-05T11:59:12Z

← Older revision		Revision as of 07:59, 5 June 2013
Line 8:		Line 8:
	* set promiscuous mode on guest virtio-net device		* set promiscuous mode on guest virtio-net device
	* all this controllable by host admin		* all this controllable by host admin





	TODO:		TODO:
Line 17:		Line 21:

	* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.		* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.


			QEMU:

			* Amos Kong works on QEMU side [http://lists.nongnu.org/archive/html/qemu-devel/2013-06/msg00658.html] to add event notification when guest change rx-filter config (main-mac, rx-mode, mac-table, vlan-table). Libvirt will query the rx-filter config from monitor (query-rx-filter), then sync the change to host device.

Dragos.tatulea at 14:11, 16 November 2010

2010-11-16T14:11:19Z

← Older revision		Revision as of 10:11, 16 November 2010
Line 12:		Line 12:
	* There's a patch [http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.		* There's a patch [http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.

	* Implement ~~ioctl+~~filtering in macvtap ~~as well~~. ~~Based on above patch MAC~~ filtering information will be ~~forwarded to the guest kernel via~~ TUNSETTXFILTER (~~indirectly~~).		* Implement filtering in macvtap. The filtering information will be received through TUNSETTXFILTER ioctl (by above patch).

	* Implement promiscuous mode in guest virtio-net driver. No ideas here, yet.		* Implement promiscuous mode in guest virtio-net driver. No ideas here, yet.

	* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.		* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.

Dragos.tatulea at 14:07, 16 November 2010

2010-11-16T14:07:18Z

← Older revision		Revision as of 10:07, 16 November 2010
Line 12:		Line 12:
	* There's a patch [http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.		* There's a patch [http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.

	* Implement ~~VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling~~ in ~~qemu virtio-net~~. ~~These capabilities are advertised but commands are silently dropped~~.		* Implement ioctl+filtering in macvtap as well. Based on above patch MAC filtering information will be forwarded to the guest kernel via TUNSETTXFILTER (indirectly).

	* Implement promiscuous mode in guest virtio-net driver. No ideas here, yet.		* Implement promiscuous mode in guest virtio-net driver. No ideas here, yet.

	* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.		* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.

Dragos.tatulea at 17:10, 1 November 2010

2010-11-01T17:10:48Z

← Older revision		Revision as of 13:10, 1 November 2010
Line 14:		Line 14:
	* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.		* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.

	* Implement promiscuous mode in guest virtio-net driver.		* Implement promiscuous mode in guest virtio-net driver. No ideas here, yet.

	* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.		* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.

Dragos.tatulea at 17:10, 1 November 2010

2010-11-01T17:10:17Z

← Older revision		Revision as of 13:10, 1 November 2010
Line 14:		Line 14:
	* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.		* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.

	* Control should be done via qemu ~~capabilities~~. Need a way to disable access that qemu can't override unless it has net admin capability.		* Implement promiscuous mode in guest virtio-net driver.

			* Control should be done via qemu/virtio features. Need a way to disable access that qemu can't override unless it has net admin capability.

Dragos.tatulea at 17:01, 1 November 2010

2010-11-01T17:01:50Z

← Older revision		Revision as of 13:01, 1 November 2010
Line 10:		Line 10:

	TODO:		TODO:
	* There's a patch [1] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.		* There's a patch [http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.

	* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.		* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.

	* Control should be done via qemu capabilities. Need a way to disable access that qemu can't override unless it has net admin capability.		* Control should be done via qemu capabilities. Need a way to disable access that qemu can't override unless it has net admin capability.

	~~http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719~~

Dragos.tatulea at 16:51, 1 November 2010

2010-11-01T16:51:06Z

New page

== guest programmable mac/vlan filtering with macvtap ==

This would be nice to have to be able to do bridging or use macvlan inside the guest.

We neet to be able to:
* change mac address of the guest virtio-net interface.
* create a vlan device on the guest virtio-net device
* set promiscuous mode on guest virtio-net device
* all this controllable by host admin

TODO:
* There's a patch [1] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.

* Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.

* Control should be done via qemu capabilities. Need a way to disable access that qemu can't override unless it has net admin capability.

http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719