search

csmart / ansible-role-virt-infra

Define and manage guests and networks on a KVM host with Ansible
GNU General Public License v3.0
67 stars 48 forks source link

ensure netfilter disabled on bridges #21

Closed csmart closed 4 years ago

csmart commented 4 years ago

When VMs are connected to a bridge they can be sent to iptables for processing.

This is generally not desired for VM on a bridge, as it will block traffic coming in to the VM.

This patch makes sure that, if br_netfilter exists, it is loaded and then disabled on bridges with sysctl.