regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzende des Aufsichtsrats: Martina Koederitz
Geschäftsführung: Dirk Wittkopp
Sitz der
()).
libvirtd-lldpad communication is still working, but lldpad-libvirtd
not anymore (CONNECTION_REFUSED).
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research
association for
(managerid, typeid, typeidversion, instanceid, vlanid)
and that the VM would need to add the correct VLAN tag in order to be
able to communicate.
Does that make sense?
Best regards,
Gerhard Stenzel, Hybrid Technologies, LTC
is
really how much control should the host have vs the guest. There are
definitely scenarios thinkable where the host should do the association.
Best regards,
Gerhard Stenzel, Hybrid Technologies, LTC
not know for Qbh, but for Qbg:
The switch knows nothing about macvtap devices or virtual functions,
what matters is the combination of
(managerid, typeid, typeidversion, instanceid, vlanid)
to make an association.
Best regards,
Gerhard Stenzel, Hybrid Technologies, LTC
interface and this is where the association request is sent to,
via lldpad.
For the PCI passthrough case, the same must be possible, assuming the
physical interface can be concluded from the PCI device and the VLAN
information is provided.
Or do I miss something?
Best regards,
Gerhard Stenzel, Hybrid
and the Qbg
part can be added later, if necessary.
Best regards,
Gerhard Stenzel, Hybrid Technologies, LTC
---
IBM Deutschland Research Development GmbH
Vorsitzende des
to the same network as eth0. Please
be aware that, depending on your switch configuration (supports hair pin
mode or not), your host might not be able to talk to your VM and vice
versa.
--
Best regards,
Gerhard Stenzel
,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft
On Mon, 2011-08-22 at 05:17 -0400, Laine Stump wrote:
For some reason beyond my comprehension, the designers of SRIOV ethernet
cards decided that the virtual functions (VF) of the card (each VF
corresponds to an ethernet device, e.g. eth10) should each be given a
new+different+random MAC
%if 0%{?fedora} = 15 || 0%{?rhel} = 6
%define with_sanlock 0%{!?_without_sanlock:%{server_drivers}}
%endif
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland
On Wed, 2011-06-22 at 16:30 +0800, Daniel Veillard wrote:
ACK,
Actually, this is not needed anymore, now that the functions are in
interface.c
--
Best regards,
Gerhard Stenzel
at herrendoerfer.name
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
Index: libvirt/src/qemu/qemu_command.c
===
--- libvirt.orig/src/qemu/qemu_command.c
+++ libvirt/src/qemu/qemu_command.c
@@ -128,7 +128,7 @@ qemuPhysIfaceConnect
remembering the previous setting while the VM is running.
This also works if libvirtd is restarted while the VM is running.
the patch passes make syntax-check
Signed-off-by: Dirk Herrendoerfer d.herrendoerfer at herrendoerfer.name
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
The following patch renames the function to set the MAC of an interface
from ifSetInterfaceMac() to brSetInterfaceMac() and makes it available
to other components.
It also adds brGetInterfaceMac() to retrieve the MAC.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/src
regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der
d.herrendoerfer at herrendoerfer.name
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
Index: libvirt/src/libvirt_macvtap.syms
===
--- libvirt.orig/src/libvirt_macvtap.syms
+++ libvirt/src/libvirt_macvtap.syms
@@ -5,6 +5,8
by setting and resetting the MAC
while remembering the previous setting while the VM is running.
This also works if libvirtd is restarted while the VM is running.
The patch passes make syntax-check
Signed-off-by: Dirk Herrendoerfer d.herrendoerfer at herrendoerfer.name
Signed-off-by: Gerhard Stenzel
and the comments. I am temporarily taking over
from Dirk and just sent out a V2 patch which should address most of the
comments
--
Best regards,
Gerhard Stenzel,
---
IBM
'/
On the layer='network|link' question, would layer='IP|MAC' not be
clearer?
Regarding the mode attribute:
mode='bridge|vepa|private|passthrough' seems sufficient to me,
bridge-brctl or bridge-macvtap can be concluded from the dev
attribute, right?
...
--
Best regards,
Gerhard Stenzel
of the VFs, then I would not list eth10
in the interface pool for passthrough devices.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
On Mon, 2011-06-13 at 12:09 -0600, Eric Blake wrote:
/tmp is probably not the best place; we already have a hierarchy under
/var/run/libvirt/ and this information should live somewhere in that
hierarchy.
How about /var/run/libvirt/network ?
--
Best regards,
Gerhard Stenzel
regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft
For IEEE 802.1Qbg, it is necessary to use a VLAN interface.
vepa itself does not require a VLAN interface.
Signed-off-by: Gerhard Stenzel stenzel at de.ibm.com
===
--- a/docs/formatdomain.html.in
+++ b/docs/formatdomain.html.in
This patchs adds documentation about the 802.1Qbg related parameters
of the virtualport element in a 'direct' interface definition.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
patch attached to avoid line wrapping
--
Best regards,
Gerhard Stenzel
On Fri, 2011-03-11 at 10:11 -0700, Eric Blake wrote:
Indeed, and I just pushed the trivial fix.
Thanks for pushing .. and for all the corrections as well
--
Best regards,
Gerhard Stenzel
or
comments regarding the patch or the approach it implements?
We would very much appreciate it if this would make it into 0.8.7
--
Best regards,
Gerhard Stenzel,
---
IBM
regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft
it. Or something like
that.
Thanks for the feedback. The changes are in the attached new versions of
the patches. It would be great if you could push at least
modify_library_functions.patch to the git.
--
Best regards,
Gerhard Stenzel
On Thu, 2010-10-07 at 13:23 +0100, Daniel P. Berrange wrote:
Since most systems won't yet have lldptool present, you should
surround the entire test from here onwards in a big 'SKIP : {}'
block. eg
cool .. V3 attached
--
Best regards,
Gerhard Stenzel
the test case.
Thanks in advance.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
On Fri, 2010-09-10 at 16:02 +0200, Gerhard Stenzel wrote:
Sounds good and I will give it a try ...
All my tests worked except scripts/nwfilter/210-no-mac-spoofing.t, which
failed with on Fedora 13:
...
# ' /test.sh
input must be 8 bytes long at /usr/lib64/perl5/Crypt/DES.pm line 57.
# Looks
by using utf8::encode.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk
-assamese
#m17n-db-punjabi
#iok
#m17n-db-telugu
#tm17n-db-malayalam
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des
During function test of the 802.1Qbg implementation in lldpad we came
across a small problem in the handling of the netlink message
corresponding to PORT_PROFILE_RESPONSE_INPROGRESS. This should not
result in returning the default rc=1.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
/
I'm just trying to get my machines working again so I can actually try
out your test cases myself...then i give any more feedback...
Thanks, please find attached my ks.cfg
Regards,
Daniel
--
Best regards,
Gerhard Stenzel
, that
there is currently no public available version of lldptool which accepts
this command line. This is also work in progress.
This applies on top of the patch Stefan just posted.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/src/util/macvtap.c
or the even the macvtap to lldptool. The same would be true
for finding the VLAN ID. For both the code I posted here on libvirt
mailing list could be used in lldpad. For now I won't check it in.
If that is the preferred way ... fine with me.
--
Best regards,
Gerhard Stenzel
On Wed, 2010-05-12 at 21:08 +0200, Gerhard Stenzel wrote:
On Wed, 2010-05-12 at 13:21 -0400, Stefan Berger wrote:
I am wondering whether it would not be 'more general' to have lldpad
determine
the root interface and handling bonding interfaces on the way
rather
than libvirt trying
,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen
libvirtd starts up and reads all domain files. The
second line is when I tried to edit the domain xml via virsh edit.
--
Best regards,
Gerhard Stenzel,
---
IBM
?
On Thu, 2010-04-15 at 15:27 +0100, Daniel P. Berrange wrote:
On Thu, Apr 15, 2010 at 02:35:41PM +0200, Gerhard Stenzel wrote:
The following patch mainly adds a set of test case to verify that
several spoofing attacks are prevented by the nwfilter subsystem.
In order to have a well
= shift;
+my $tmp = `grep $mac /var/lib/dnsmasq/dnsmasq.leases`;
+my @fields = split(/ /, $tmp);
+my $ip = $fields[2];
+return $ip;
+}
+1;
--
Best regards,
Gerhard Stenzel
;
the script works as expected.
I am wondering if this is a problem in the libvirt-perl wrapper or
working as designed and my expectation is simply wrong?
Thanks in advance...
--
Best regards,
Gerhard Stenzel
works as expected.
BTW, additional test cases for libvirt-TCK should be send as patches to
this list, correct?
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland
, but
what is the best way to solve this in a libvirt-tck way?
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats
the guest itself.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk
-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des
This patch changes the original element info for referencing a filter
from filter name=../ to filterref filter=/, as it is currently
implemented.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/docs/schemas/domain.rng
regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft
traffic.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
a macvtap usage example to the Network Interface
chapter of the Libvirt Application Development Guide.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research
,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen
@@ if (!iface) {
para
virInterfaceDestroy makes the given interface inactive (down).
On
success, it returns 0. If there is any problem making the
interface
- acrive, -1 is returned.
+ active, -1 is returned.
/para
example
--
Best regards,
Gerhard
On Mon, 2010-01-25 at 14:59 +, Daniel P. Berrange wrote:
On Fri, Jan 22, 2010 at 01:29:16PM +0100, Gerhard Stenzel wrote:
On Wed, 2010-01-13 at 17:36 +, Daniel P. Berrange wrote:
...
The shear size of the ruleset inside the interface element is
rather alarming to me. Imagine if you
.
agreed.
We will start with the implementation and send a patch or rather a
series once we have them.
Thanks.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland
/element
/zeroOrMore
/choice
/element
/zeroOrMore
/element
/define
/grammar
--
Best regards,
Gerhard Stenzel
Hi, I cloned the repository from git://libvirt.org/libvirt-appdev-guide
The file en-US/Book_Info.xml contains
productnumber0.7.3/productnumber, whereas the docments at
http://libvirt.org/guide/ show 0.7.5
Have I cloned the wrong repository?
--
Best regards,
Gerhard Stenzel
errno=0
0 bytes '(null)'
For the failing qemu:
qemuMonitorCommandWithHandler:221 : Receive command reply ret=0 errno=0
44 bytes 'No file descriptor supplied via SCM_RIGHTS^M
'
Any ideas?
--
Best regards,
Gerhard Stenzel
On Tue, 2009-11-10 at 13:28 +0100, Gerhard Stenzel wrote:
This patch removes the port filter if the network device is detached
via virDomainDetachDevice.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/src/qemu/qemu_driver.c
This patch removes ebtables rules at qemud shutdown time
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/src/qemu/qemu_bridge_filter.c
===
--- libvirt.orig/src/qemu/qemu_bridge_filter.c
+++ libvirt/src/qemu
address could be a problem.
What am I missing?
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats
rawhide
box).
This causes it to print lots of error messages on libvirtd startup. It
would
be nice to find a way to just VIR_DEBUG that the binary wasn't found and
skip
initializing the driver.
ok. I will look into this.
Thanks,
Cole
Best regards,
Gerhard Stenzel, Linux on Cell/Hybrid
This patch removes the port filter if the network device is detached
via virDomainDetachDevice.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
Index: libvirt/src/qemu/qemu_driver.c
===
--- libvirt.orig/src/qemu
enough with an extra patch though, and a single
catch-all rule for multi/broad-cast packets.
Daniel
something like the following?
ebtables -A libvirt_qemu_FORWARD -p ARP -j ACCEPT
any other multi/broad-cast packets you/Mark had in mind?
--
Best regards,
Gerhard Stenzel
On Tue, 2009-11-03 at 23:17 +0100, Daniel Veillard wrote:
On Tue, Oct 27, 2009 at 12:36:09PM +0100, Gerhard Stenzel wrote:
This patch adds the files which implement the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
...
+/**
+ * ebtablesSaveRules
This patch adds the files which implement the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
configure.in |3
src/Makefile.am |1
src/libvirt_private.syms |7 +
src/util/ebtables.c | 441
capability to the API
level and virsh command level. The plan is also to add more filtering features
like VLAN filtering and QoS filtering.
Thanks, Gerhard
---
Gerhard Stenzel (2):
add MAC address based port filtering to qemu
add ebtables wrapper
configure.in |3
is
started or destroyed. The plan is to extend this filter capability to the API
level and virsh command level. The plan is also to add more filtering features
like VLAN filtering and QoS filtering.
Thanks, Gerhard
---
Gerhard Stenzel (3):
add MAC address based port filtering to qemu
add
This patch adds the files which implement the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
src/util/ebtables.c | 982 +++
src/util/ebtables.h | 134 +++
2 files changed, 1116 insertions(+), 0 deletions
This patch adds build support for the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
configure.in |3 +++
src/Makefile.am |1 +
src/libvirt_private.syms | 27 +++
3 files changed, 31 insertions(+), 0
This patch adds MAC address based port filtering to the qemu driver.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
src/qemu/qemu.conf |3 ++
src/qemu/qemu_conf.c | 85
src/qemu/qemu_conf.h |8 +
src/qemu
This patch adds the files which implement the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
src/util/ebtables.c | 964 +++
src/util/ebtables.h | 136 +++
2 files changed, 1100 insertions(+), 0 deletions
This patch adds build support for the ebtables wrapper.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
configure.in|3 +++
src/Makefile.am |1 +
2 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/configure.in b/configure.in
index cb5ce55..9e9aa3a 100644
This patch adds the ebtables wrapper to the network driver.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
src/conf/network_conf.h | 10 ++
src/libvirt_private.syms| 26 ++
src/network/bridge_driver.c | 179 +++
3 files
This patch adds MAC address based port filtering support to libvirt.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
include/libvirt/libvirt.h.in | 16 ++
src/driver.h | 16 ++
src/libvirt.c| 121
This patch adds MAC address based port filtering to the qemu driver.
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
---
src/qemu/qemu.conf |3 +++
src/qemu/qemu_conf.c | 14 ++
src/qemu/qemu_conf.h |2 ++
src/qemu/qemu_driver.c | 23
This patch removes the currently unused network parameter to pass make check
Signed-off-by: Gerhard Stenzel gerhard.sten...@de.ibm.com
--- a/include/libvirt/libvirt.h.in
+++ b/include/libvirt/libvirt.h.in
@@ -890,12 +890,10 @@ int virNetworkSetAutostart
(virNetworkPtr
via virsh is also an option.
Comments are appreciated.
--
Best regards,
Gerhard Stenzel,
---
IBM Deutschland Research Development GmbH
Vorsitzender des Aufsichtsrats
On Wed, 2009-08-19 at 13:35 +0100, Daniel P. Berrange wrote:
On Wed, Aug 19, 2009 at 02:11:14PM +0200, Gerhard Stenzel wrote:
...
I think this extra XML element is probably redundant - we should always do
MAC filtering at all times, on all bridges. Not simply those used in a
virtual network
80 matches
Mail list logo
