KVM: enable no-mac-spoofing on virtual nics

weizhouapache · weizhouapache · commit 0347115c5ce3 · 2024-04-19T19:48:52.000+02:00
Refer to https://libvirt.org/firewall.html#the-network-filter-driver https://libvirt.org/formatnwfilter.html#concepts
diff --git a/plugins/hypervisors/kvm/src/main/java/com/cloud/hypervisor/kvm/resource/LibvirtVMDef.java b/plugins/hypervisors/kvm/src/main/java/com/cloud/hypervisor/kvm/resource/LibvirtVMDef.java
@@ -1597,6 +1597,7 @@ public String getContent() {
             }
             if (_macAddr != null) {
                 netBuilder.append("<mac address='" + _macAddr + "'/>\n");
+                netBuilder.append("<filterref filter='no-mac-spoofing'/>\n");
             }
             if (_model != null) {
                 netBuilder.append("<model type='" + _model + "'/>\n");

Original file line number	Diff line number	Diff line change
`@@ -1597,6 +1597,7 @@ public String getContent() {`
`1597`	`1597`	`}`
`1598`	`1598`	`if (_macAddr != null) {`
`1599`	`1599`	`netBuilder.append("<mac address='" + _macAddr + "'/>\n");`
	`1600`	`+ netBuilder.append("<filterref filter='no-mac-spoofing'/>\n");`
`1600`	`1601`	`}`
`1601`	`1602`	`if (_model != null) {`
`1602`	`1603`	`netBuilder.append("<model type='" + _model + "'/>\n");`