[libvirt-users] libvirtd firewalld support

[Cole Robinson]

On 03/22/2017 10:39 AM, Leon Goldberg wrote:
> Hey,
> 
> I've been wondering about the extent libvirt makes use of firewalld.
> I'm looking to use firewalld exclusively and wonder about the ports
> libvirt takes care of for me via firewalld (e.g. will console/vnc
> ports, qemu migration ports, etc, will be handled for me?)
> 
> I have only done a little bit of testing, but it seems like I can't
> connect to a vm via vnc without explicitly opening ports beforehand.
> 

Libvirt doesn't do stuff like that automatically. It's usage of firewalld and
firewalls in general is for 1) virtual networks (for example the 'default'
network that sets up NAT equivalent for your VMs) and 2) nwfilter config (
https://libvirt.org/formatnwfilter.html )

- Cole