I asked a similar question here but I messed up logging in with my SE account and so I can't edit it.

Here is what I would specifically like to achieve with libvirt under the "Internal Network" heading.

A comment in the previous question mentioned Isolated mode, but according to the libvirt wiki:

In this mode, guests connected to the virtual switch can communicate with each other, and with the host. However, their traffic will not pass outside of the host, nor can they receive traffic from outside the host.

The diagram shows the virtual switch between the host and guests, but I want to have a similar configuration to the virtualbox diagram linked above, with one VM1 having 2 NICs of an internal network and a bridge (NAT in the picture but bridged is preferable).

Does the first answer apply here still given my more specific explanation? It seems like a bridge of this sort would not exactly do what I want. Should I do a VLAN instead?

  • 1
    You can have two bridges, one with no IP configured on the host (and perhaps further nftables / ebtables protection) and no physical NIC enslaved to it, one with opposite configuration on both terms. The former will act as the "internal switch" that connects all VM, the latter will be used by only "VM1". VM1 will then be able to work like a (second-level) home router for the other VMs.
    – Tom Yan
    Aug 21, 2021 at 9:03
  • About your account issue, please visit this help page: serverfault.com/help/merging-accounts (you created a new account and gave the same name, but serverfault.com/users/796910/supportivedante != serverfault.com/users/796993/supportivedante )
    – A.B
    Aug 21, 2021 at 9:35
  • Thanks @TomYan this seems to have worked! Aug 22, 2021 at 0:07


You must log in to answer this question.