Re: [PATCH V10 0/7] Add DHCP snooping support to nwfilter

[dennis jenkins <dennis.jenkins.75@xxxxxxxxx>]

On Mon, Apr 16, 2012 at 2:33 PM, dennis jenkins <dennis.jenkins.75@xxxxxxxxx> wrote:

On Mon, Apr 16, 2012 at 2:22 PM, Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx> wrote:

On 04/16/2012 03:12 PM, dennis jenkins wrote:

On Mon, Apr 16, 2012 at 10:08 AM, Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx> wrote:

This series of patches adds DHCP snooping support to libvirt's
nwfilter subsystem.

Stefan, David,

   Thank you very much for this functionality.  As a side-effect, it solves a problem that I needed addressed: namely, to know via Sys-Virt, the IP address associated with a virtual machine (without having to grovel through the DHCP lease file, out of band).

Dennis,

  that's great to hear. Did you test them?

  Stefan

Not yet.  I run Gentoo Linux, and I try to keep my system really clean by not having manually installed packages.  However, if you would like some independent testing, I can tinker with it.  I have to figure out the ins and outs of GIT first, though.  I do my own stuff with SVN and have not learned git yet.

The latest libvirt in Gentoo is version "0.9.10-r4".  Ignoring the "-r4", 9.10 is about 2 months old, correct?  So I might be waiting a while for this patch to make it to my portage tree.

Is there a specific git command line that I should use to pull a specific libvirt code set, or should I just go for the head / bleeding edge?

Stefan,

   There is a potential bug [1] in the Gentoo package that tracks the libvirt git repository.  I will wait a few days for the Gentoo folks to sort it out.  If not, I will remove the Gentoo libvirt package and install the latest from git manually.  I intend to test this feature and provide feedback for you.  Again, thank you for this feature.  I understand that your implementation is to address a network security concern.

    I intend to expand to apache/mod_perl/Sys-Virt/libvirt management tool to concurrently monitor QEMU and LXC.  It would be nice if I could get the IP address for each virtual system in a uniform way.  I do not know if this is a feasible feature to request.  I will already have to work around the differences between QEMU and LXC in code, so this isn't a huge deal.  Just a suggestion for a possible future feature.

[1] http://forums.gentoo.org/viewtopic-p-7015930.html#7015930


--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list