ネットが実にわかりにくいですね．<\/p>\n
ゲストのネットアクセスをどうするか，KVMにはいくつかの方法が用意されていますが，私のところで唯一動いたのは，NATを利用する方法です．ゲストに仮想的なNICを装着させて，ホスト側では，それを仮想的なディバイスで受け止めます．まあ，P-Pのような接続形態になります（ゲスト同士ではlocalnet内としてつながるかもしれませんが，それまでは予定していません^^; ）．<\/p>\n
外界へはどう出るかとなると，NATなのです．KVM(qemu)を走らせるためのデーモン，libvirtdが，起動時に，iptablesを書き換えてくれます．<\/p>\n
ありふれたLANの中に１つだけインターフェースを持ったWSが特にiptablesを使わずに動いているというありふれた場合には，大変ありがたい機能です．<\/p>\n
しかし^^; 私の管理しているWSは，どれも，２つ以上のLANアダプターを装着し，別の仮想的なネットワーク用のポートがいくつか装着されています．当然，iptablesを駆使して，かなりいろんな設定をしています^^;<\/p>\n
これで，libvirtdに書き換えられてしまうと，なかなか面倒です．ということで，どうすれば，libvirtdが起動するときに，余計なことをしてくれないように設定すれば良いのか，というところにぶち当たってます．<\/p>\n","protected":false},"excerpt":{"rendered":"
\u30cd\u30c3\u30c8\u304c\u5b9f\u306b\u308f\u304b\u308a\u306b\u304f\u3044\u3067\u3059\u306d\uff0e \u30b2\u30b9\u30c8\u306e\u30cd\u30c3\u30c8\u30a2\u30af\u30bb\u30b9\u3092\u3069\u3046\u3059\u308b\u304b\uff0cKVM\u306b\u306f\u3044\u304f\u3064\u304b\u306e\u65b9\u6cd5\u304c\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u304c\uff0c\u79c1\u306e\u3068\u3053\u308d\u3067\u552f\u4e00\u52d5\u3044\u305f\u306e\u306f\uff0cNAT\u3092\u5229\u7528\u3059\u308b\u65b9\u6cd5\u3067\u3059\uff0e\u30b2\u30b9\u30c8\u306b\u4eee\u60f3\u7684\u306aNIC\u3092\u88c5\u7740\u3055\u305b\u3066\uff0c\u30db\u30b9\u30c8\u5074\u3067\u306f\uff0c\u305d\u308c\u3092\u4eee\u60f3\u7684\u306a\u30c7\u30a3\u30d0\u30a4\u30b9\u3067\u53d7\u3051\u6b62\u3081\u307e\u3059\uff0e\u307e\u3042\uff0cP-P\u306e\u3088\u3046\u306a\u63a5\u7d9a\u5f62\u614b\u306b\u306a\u308a\u307e\u3059\uff08\u30b2\u30b9\u30c8\u540c\u58eb\u3067\u306flocalnet\u5185\u3068\u3057\u3066\u3064\u306a\u304c\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u304c\uff0c\u305d\u308c\u307e\u3067\u306f\u4e88\u5b9a\u3057\u3066\u3044\u307e\u305b\u3093^^; \uff09\uff0e \u5916\u754c\u3078\u306f\u3069\u3046\u51fa\u308b\u304b\u3068\u306a\u308b\u3068\uff0cNAT\u306a\u306e\u3067\u3059\uff0eKVM(qemu)\u3092\u8d70\u3089\u305b\u308b\u305f\u3081\u306e\u30c7\u30fc\u30e2\u30f3\uff0clibvirtd\u304c\uff0c\u8d77\u52d5\u6642\u306b\uff0ciptables\u3092\u66f8\u304d\u63db\u3048\u3066\u304f\u308c\u307e\u3059\uff0e \u3042\u308a\u3075\u308c\u305fLAN\u306e\u4e2d\u306b\uff11\u3064\u3060\u3051\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u6301\u3063\u305fWS\u304c\u7279\u306biptables\u3092\u4f7f\u308f\u305a\u306b\u52d5\u3044\u3066\u3044\u308b\u3068\u3044\u3046\u3042\u308a\u3075\u308c\u305f\u5834\u5408\u306b\u306f\uff0c\u5927\u5909\u3042\u308a\u304c\u305f\u3044\u6a5f\u80fd\u3067\u3059\uff0e \u3057\u304b\u3057^^; \u79c1\u306e\u7ba1\u7406\u3057\u3066\u3044\u308bWS\u306f\uff0c\u3069\u308c\u3082\uff0c\uff12\u3064\u4ee5\u4e0a\u306eLAN\u30a2\u30c0\u30d7\u30bf\u30fc\u3092\u88c5\u7740\u3057\uff0c\u5225\u306e\u4eee\u60f3\u7684\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7528\u306e\u30dd\u30fc\u30c8\u304c\u3044\u304f\u3064\u304b\u88c5\u7740\u3055\u308c\u3066\u3044\u307e\u3059\uff0e\u5f53\u7136\uff0ciptables\u3092\u99c6\u4f7f\u3057\u3066\uff0c\u304b\u306a\u308a\u3044\u308d\u3093\u306a\u8a2d\u5b9a\u3092\u3057\u3066\u3044\u307e\u3059^^; \u3053\u308c\u3067\uff0clibvirtd\u306b\u66f8\u304d\u63db\u3048\u3089\u308c\u3066\u3057\u307e\u3046\u3068\uff0c\u306a\u304b\u306a\u304b\u9762\u5012\u3067\u3059\uff0e\u3068\u3044\u3046\u3053\u3068\u3067\uff0c\u3069\u3046\u3059\u308c\u3070\uff0clibvirtd\u304c\u8d77\u52d5\u3059\u308b\u3068\u304d\u306b\uff0c\u4f59\u8a08\u306a\u3053\u3068\u3092\u3057\u3066\u304f\u308c\u306a\u3044\u3088\u3046\u306b\u8a2d\u5b9a\u3059\u308c\u3070\u826f\u3044\u306e\u304b\uff0c\u3068\u3044\u3046\u3068\u3053\u308d\u306b\u3076\u3061\u5f53\u305f\u3063\u3066\u307e\u3059\uff0e<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_daextam_enable_autolinks":"","footnotes":""},"categories":[21,8],"tags":[568],"class_list":["post-3373","post","type-post","status-publish","format-standard","hentry","category-kvm","category-linux","tag-lan"],"publishpress_future_action":{"enabled":false,"date":"2026-05-21 20:39:11","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/3373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3373"}],"version-history":[{"count":0,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/3373\/revisions"}],"wp:attachment":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}