GuestProgrammableMacVlanFiltering

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

guest programmable mac/vlan filtering with macvtap

This would be nice to have to be able to do bridging or use macvlan inside the guest.

We neet to be able to:

change mac address of the guest virtio-net interface.
create a vlan device on the guest virtio-net device
set promiscuous mode on guest virtio-net device
all this controllable by host admin

TODO:

There's a patch [1] proposed by Alex Williamson to do TX mac filtering in TUN. It's still in RFC state, no recent activity in thread. Try rewrite based on comments.

Implement VIRTIO_NET_F_MAC, VIRTIO_NET_F_CTRL_VLAN handling in qemu virtio-net. These capabilities are advertised but commands are silently dropped.

Control should be done via qemu capabilities. Need a way to disable access that qemu can't override unless it has net admin capability.

http://thread.gmane.org/gmane.comp.emulators.qemu/37714/focus=37719