[libvirt] [PATCH] Add V6LOCAL parameter to nwfilter rules.

Brian Rak brak at gameservers.com
Wed Apr 2 20:30:02 UTC 2014


On 4/2/2014 4:11 PM, Eric Blake wrote:
> On 04/02/2014 01:56 PM, Eric Blake wrote:
>> On 04/02/2014 01:40 PM, Brian Rak wrote:
>>> Currently, adding any sort of IPv6 nwfilter rules is rather difficult.  There are no standard rules,
>> Also worth an example of what this will contain (such as
>> fe80::5254:00ff:fe1a:0a6d).
>>> +            parsedMac.addr[0] ^= 2;
> Oh, and forgot to mention, should this be |= instead of ^=, since by
> default, libvirt assigns MAC addresses with bit 2 already set?  My
> understanding is that bit 2 is the locally-administered bit, and that
> the V6LOCAL address always wants it set (^= only works if the MAC
> address is not also locally administered, but libvirt's generated MAC
> addresses of 52:54:00:xx:yy:zz fall foul of that)
>
For link-local addresses, you want to invert the bit, not ensure that 
it's always set.  This matches what linux is doing doing: 
http://lxr.free-electrons.com/source/net/ipv6/addrconf.c#L1724




More information about the libvir-list mailing list