From 003fa6d676b44bca3f5d3d0c71f475d37cf3285d Mon Sep 17 00:00:00 2001 From: Cole Robinson Date: Fri, 15 Apr 2016 17:58:00 -0400 Subject: [PATCH] docs: domain: Document network The proper nwfilter docs go into full detail, but we should still have a brief bit about domain XML in the domain documentation --- docs/formatdomain.html.in | 40 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) diff --git a/docs/formatdomain.html.in b/docs/formatdomain.html.in index 54ad99b74e..895114bffe 100644 --- a/docs/formatdomain.html.in +++ b/docs/formatdomain.html.in @@ -4909,6 +4909,46 @@ qemu-kvm -net nic,model=? /dev/null <model> element is mandatory.

+
Traffic filtering with NWFilter
+ +

+ Since 0.8.0 an nwfilter profile + can be assigned to a domain interface, which allows configuring + traffic filter rules for the virtual machine. + + See the nwfilter documentation for more + complete details. +

+ +
+  ...
+  <devices>
+    <interface ...>
+      ...
+      <filterref filter='clean-traffic'/>
+    </interface>
+    <interface ...>
+      ...
+      <filterref filter='myfilter'>
+        <parameter name='IP' value='104.207.129.11'/>
+        <parameter name='IP6_ADDR' value='2001:19f0:300:2102::'/>
+        <parameter name='IP6_MASK' value='64'/>
+        ...
+      </filterref>
+    </interface>
+  </devices>
+  ...
+ +

+ The filter attribute specifies the name of the nwfilter + to use. Optional <parameter> elements may be + specified for passing additional info to the nwfilter via the + name and value attributes. See + the nwfilter + docs for info on parameters. +

+ +

Input devices