How can I properly add basic network filters (clean-traffic or, at least, ip-spoofing prevention) to XEN (xend) guests managed by libvirt?
Or, in particular, can I manually execute libvirt's nwfilters from a script (for given parameters)?
I am using libvirt's network to create the bridge (default
, bridge virbr0
), but, apparently, the xen's vif-bridge
script is used to initialize the virtualized system's networking, and libvirt drops nwfilter
definitions in domain's xml (probably because it is converted to xen's native config).