1
0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-12-23 21:34:54 +03:00
libvirt/tests/networkxml2xmlout
Gene Czarcinski 705e67d40b network: allow guest to guest IPv6 without gateway definition
This patch adds the capability for virtual guests to do IPv6
communication via a virtual network interface with no IPv6 (gateway)
addresses specified.  This capability has always been enabled by
default for IPv4, but disabled for IPv6 for security concerns, and
because it requires the ip6tables command to be operational (which
isn't the case on a system with the ipv6 module completely disabled).

This patch adds a new attribute "ipv6" at the toplevel of a <network>
object.  If ipv6='yes', the extra ip6tables rules required to permite
inter-guest communications are added when the network is started. If
it is 'no', or not present, those rules will not be added; thus the
default behavior doesn't change, so there should be no compatibility
issues with any existing installations.

Note that virtual guests cannot communication with the virtualization
host via this interface, because the following kernel tunable has
been set:

   net.ipv6.conf.<bridge_interface_name>.disable_ipv6 = 1

This assures that the bridge interface will not have an IPv6
link-local (fe80::) address.

To control this behavior so that it is not enabled by default, the parameter
ipv6='yes' on the <network> statement has been added.

Documentation related to this patch has been updated.
The network schema has also been updated.
2012-12-05 14:58:32 -05:00
..
8021Qbh-net.xml conf: add <vlan> element to network and domain interface elements 2012-08-15 13:10:57 -04:00
bandwidth-network.xml bandwidth: Add test cases for network 2011-07-25 13:50:06 +08:00
direct-net.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
empty-allow-ipv6.xml network: allow guest to guest IPv6 without gateway definition 2012-12-05 14:58:32 -05:00
host-bridge-net.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
hostdev-pf.xml conf: parser/formatter/rng for <forward mode='hostdev'> 2012-08-17 15:43:26 -04:00
hostdev.xml conf: parser/formatter/rng for <forward mode='hostdev'> 2012-08-17 15:43:26 -04:00
isolated-network.xml Give each virtual network bridge its own fixed MAC address 2011-02-17 13:36:32 -05:00
nat-network-dns-hosts.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
nat-network-dns-srv-record-minimal.xml Implement DNS SRV record into the bridge driver 2012-01-02 23:05:55 +08:00
nat-network-dns-srv-record.xml Implement DNS SRV record into the bridge driver 2012-01-02 23:05:55 +08:00
nat-network-dns-txt-record.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
nat-network.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
netboot-network.xml tests: Add network XML to XML tests. 2009-10-16 10:52:26 -04:00
netboot-proxy-network.xml Add support for an external TFTP boot server 2009-10-28 15:57:49 +01:00
openvswitch-net.xml conf: add <vlan> element to network and domain interface elements 2012-08-15 13:10:57 -04:00
passthrough-pf.xml Adding the element pf to network xml. 2012-01-11 13:10:21 -07:00
routed-network.xml conf: support abstracted interface info in network XML 2011-07-21 14:46:53 -04:00
vepa-net.xml conf: support partially-specified <virtualport> in parser and formatter 2012-08-14 15:47:50 -04:00