Experience with libvirt netfilter API


 
Thread Tools Search this Thread
Special Forums Cybersecurity Experience with libvirt netfilter API
# 1  
Old 11-07-2013
Experience with libvirt netfilter API

Hi all,

I would like to get some ideas and opinions on matter of libvirt netfilter application in KVM environment. I am looking for some easy way to control it with an API and possible experience with that and its performance in real life application.

Thanks for all ideas
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Cybersecurity

How to use Netfilter properly with IPv6?

Hello, on a PC with Debian 8 I try to use a Bash script with Netfilter rules so that only traffic goes in and out that is wanted. For that I set all 3 default policies to "drop". The machine uses DHCP to get its IP, gateway and DNS. And I never checked so I was quite surprised that my... (1 Reply)
Discussion started by: SInt
1 Replies

2. UNIX for Advanced & Expert Users

Libvirt does not work correctly anymore on my gentoo

Hi, Since a year my libvirtd does not work anymore on my Gentoodesktop. In the meantime a used virtualbox. But I would like to have back libvirt. The problem was after libvirt should not only work with root privileges. I deinstalled all things with libvirt an kvm. I removed all things from /var... (4 Replies)
Discussion started by: darktux
4 Replies

3. Shell Programming and Scripting

Need to run an API from a script and extract fields from output of API

Hi, I need to call an API (GetUsageDetails)from inside a shell script which takes an input argument acct_nbr. The output of API will be like : <usageAccum accumId="450" accumCaptn="PM_125" inclUnits="1410.00" inclUnitsUsed="744.00" shared="true" pooled="false" prorated="false"... (1 Reply)
Discussion started by: rkrish
1 Replies

4. Linux

netfilter / iptables

HI, Is the Netfilter and IPtables same? Thanks & Regards Arun (1 Reply)
Discussion started by: Arun.Kakarla
1 Replies

5. IP Networking

netfilter connection tracking

hi, i'm using tcpreplay to send a traffic trace to my wireless interface (the trace is been captured by the same interface). It seems as netfilter can't trace connections. Is it possible? (0 Replies)
Discussion started by: littleboyblu
0 Replies

6. Programming

extending netfilter...plz help

Hello friends i'm trying to extend iptables to include a target by which we can change the packet type field of a packet. For this i created a kernel module and a userspace extension. Now i face the problem that when i try to invoke iptable with the target i created i get an error message saying... (1 Reply)
Discussion started by: Rakesh Ranjan
1 Replies

7. Programming

Help in extending netfilter

Hi everybody, I have to write a module for matching in netfilter , extending the netfilter but I'm facing some problems can somebody guide me in that. I know that I need to write matching module working in kernel space and a program in userspace. I went through the HOWTO on netfilter-hacking but... (0 Replies)
Discussion started by: Trusted Penguin
0 Replies
Login or Register to Ask a Question
Sys::Guestfs::Lib(3pm)					User Contributed Perl Documentation				    Sys::Guestfs::Lib(3pm)

NAME
Sys::Guestfs::Lib - Useful functions for using libguestfs from Perl SYNOPSIS
use Sys::Guestfs::Lib qw(open_guest ...); $g = open_guest ($name); DESCRIPTION
"Sys::Guestfs::Lib" is an extra library of useful functions for using the libguestfs API from Perl. It also provides tighter integration with libvirt. The basic libguestfs API is not covered by this manpage. Please refer instead to Sys::Guestfs(3) and guestfs(3). The libvirt API is also not covered. For that, see Sys::Virt(3). DEPRECATION OF SOME FUNCTIONS
This module contains functions and code to perform inspection of guest images. Since libguestfs 1.5.3 this ability has moved into the core API (see "INSPECTION" in guestfs(3)). The inspection functions in this module are deprecated and will not be updated. Each deprecated function is marked in the documentation below. BASIC FUNCTIONS
open_guest $g = open_guest ($name); $g = open_guest ($name, rw => 1, ...); $g = open_guest ($name, address => $uri, ...); $g = open_guest ([$img1, $img2, ...], address => $uri, format => $format, ...); ($g, $conn, $dom, @images) = open_guest ($name); This function opens a libguestfs handle for either the libvirt domain called $name, or the disk image called $name. Any disk images found through libvirt or specified explicitly are attached to the libguestfs handle. The "Sys::Guestfs" handle $g is returned, or if there was an error it throws an exception. To catch errors, wrap the call in an eval block. The first parameter is either a string referring to a libvirt domain or a disk image, or (if a guest has several disk images) an arrayref "[$img1, $img2, ...]". For disk images, if the "format" parameter is specified then that format is forced. The handle is read-only by default. Use the optional parameter "rw => 1" to open a read-write handle. However if you open a read-write handle, this function will refuse to use active libvirt domains. The handle is still in the config state when it is returned, so you have to call "$g->launch ()". The optional "address" parameter can be added to specify the libvirt URI. The implicit libvirt handle is closed after this function, unless you call the function in "wantarray" context, in which case the function returns a tuple of: the open libguestfs handle, the open libvirt handle, and the open libvirt domain handle, and a list of [image,format] pairs. (This is useful if you want to do other things like pulling the XML description of the guest). Note that if this is a straight disk image, then $conn and $dom will be "undef". If the "Sys::Virt" module is not available, then libvirt is bypassed, and this function can only open disk images. The optional "interface" parameter can be used to open devices with a specified qemu interface. See "guestfs_add_drive_opts" in Sys::Guestfs for more details. feature_available $bool = feature_available ($g, $feature [, $feature ...]); This function is a useful wrapper around the basic "$g->available" call. "$g->available" tests for availability of a list of features and dies with an error if any is not available. This call tests for the list of features and returns true if all are available, or false otherwise. For a list of features you can test for, see "AVAILABILITY" in guestfs(3). get_partitions This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API function "list_filesystems" in Sys::Guestfs(3) instead. resolve_windows_path $path = resolve_windows_path ($g, $path); $path = resolve_windows_path ($g, "/windows/system"); ==> "/WINDOWS/System" or undef if no path exists This function, which is specific to FAT/NTFS filesystems (ie. Windows guests), lets you look up a case insensitive $path in the filesystem and returns the true, case sensitive path as required by the underlying kernel or NTFS-3g driver. If $path does not exist then this function returns "undef". The $path parameter must begin with "/" character and be separated by "/" characters. Do not use "", drive names, etc. file_architecture Deprecated function. Replace any calls to this function with: $g->file_architecture ($path); OPERATING SYSTEM INSPECTION FUNCTIONS
inspect_all_partitions This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). inspect_partition This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). inspect_operating_systems This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). mount_operating_system This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). inspect_in_detail This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). inspect_linux_kernel This function is deprecated. It will not be updated in future versions of libguestfs. New code should not use this function. Use the core API functions instead, see "INSPECTION" in guestfs(3). COPYRIGHT
Copyright (C) 2009-2012 Red Hat Inc. LICENSE
Please see the file COPYING.LIB for the full license. SEE ALSO
virt-inspector(1), Sys::Guestfs(3), guestfs(3), <http://libguestfs.org/>, Sys::Virt(3), <http://libvirt.org/>, guestfish(1). perl v5.14.2 2012-06-01 Sys::Guestfs::Lib(3pm)