Bug 745514

Summary:	Used detected guest IP address when static address specified in domain xml
Product:	[Community] Virtualization Tools	Reporter:	Stanislav Petr <glux>
Component:	libvirt	Assignee:	Libvirt Maintainers <libvirt-maint>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	berrange, crobinso, xen-maint
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-10-12 14:58:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Stanislav Petr 2011-10-12 14:48:38 UTC

when is a domain network interface defined by this xml:

    <interface type='bridge'>
      <mac address='00:16:3e:00:00:e0'/>
      <source bridge='br0'/>
      <ip address='192.168.20.31'/>
      <target dev='vps1836'/>
      <model type='virtio'/>
      <driver name='vhost' txmode='iothread' />
      <filterref filter='clean-traffic'/>
      <link state='up'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>
    </interface>

ebtables nnetwork filter uses detected IP address from first packet but not IP address specified in XML. This causes network connectivity problems in Windows 2008 on first boot after installation and it can be used by administrator of VPS to use another than configured IP address (change ip address in VPS, reboot and use the new "unauthorized" ip address).

So when IP element exist, ebtables filter can be created  immediately with this address with no try to detect used address.

Comment 1 Daniel Berrangé 2011-10-12 14:58:40 UTC

You can already do this, but the syntax is different:

<filterref filter='clean-traffic'>
  <parameter name="IP" value="192.168.20.31"/>
</filterref>

See also:

http://libvirt.org/formatnwfilter.html