I've successfully got a couple of VMs running on a single KVM master. Full interconnectivity over bridge VMBR0.
This is my setup:
Physical Host : base
VM1 : webserver
VM2 : mailserver
I've simplified this a little for ease of explanation.
My next step is configuring Shorewall to handle the firewall aspects of both the physical server and VMs, and this is where I've become a little stuck.
I have a single physical connection, eth0 bridged into VMBR0. I want this connection firewalled, so that the connections to both base, and the virtual machines are covered by this single setup. Perhaps with some simple firewalls on the VMs themselves.
These are the ports I want setup :
Base : 22, 80
Web : 80
Mailserver : 25
I'm using webmin to configure the base, and the interface is all very simple to set up, but I can't seem to find a guide which is related to my setup.
Is what I'm trying to accomplish possible? If I can get an idea of how to protect just the base and one of the VMs, I'll be able to figure out the rest.
I can't use any proxying or NATs to simplify things.
UPDATE
Here's my network : All of the VMs have bridged external IP addresses to connect directly to the internet.
Physical Host : 94.1.1.55 - This is my main connection to the internet
vmbr0 Link encap:Ethernet HWaddr 00:1c:c0:fd:69:2b
inet addr:94.1.1.55 Bcast:94.1.1.255 Mask:255.255.255.0
inet6 addr: fe80::21c:c0ff:fefd:692b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:57696 errors:0 dropped:0 overruns:0 frame:0
TX packets:33045 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6385569 (6.0 MiB) TX bytes:10474448 (9.9 MiB)
Virtual Machine : 94.1.1.56 - webserver
eth0 Link encap:Ethernet HWaddr 02:00:00:3E:48:50
inet addr:94.1.1.56 Bcast:94.1.1.255 Mask:255.255.255.0
inet6 addr: fe80::ff:fe3e:4850/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:8132 errors:0 dropped:0 overruns:0 frame:0
TX packets:5727 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1018482 (994.6 KiB) TX bytes:967192 (944.5 KiB)
Virtual Machine : 94.1.1.57 - mailserver
eth0 Link encap:Ethernet HWaddr 02:00:00:4E:80:E8
inet addr:94.1.1.57 Bcast:94.1.1.255 Mask:255.255.255.0
inet6 addr: fe80::ff:fe4e:80e8/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3715 errors:0 dropped:0 overruns:0 frame:0
TX packets:432 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:343107 (335.0 KiB) TX bytes:49979 (48.8 KiB)
Any help is appreciated, Thanks.
