Closed markgoddard closed 4 years ago
By default libvirt does not allow traffic destined for other MAC addresses to reach VMs when using a macvtap interface. This prevents multicast from working.
This change fixes the issue by setting trustGuestRxFilters to yes for macvtap interfaces.
This has security implications as it allows mac spoofing. Should it be behind a feature flag?
Done
By default libvirt does not allow traffic destined for other MAC addresses to reach VMs when using a macvtap interface. This prevents multicast from working.
This change fixes the issue by setting trustGuestRxFilters to yes for macvtap interfaces.