やっと，ネットの方も思った通りの挙動をしてくれるようになりました．<\/p>\n
libvirtdを起動してから，iptablesを再度定義し直すことで，iptables関係のトラブルを回避できるようになりました．こちらが書き換えたiptablesをlibvirtdが，元に戻すような粘着質だったらどうしようかと思いましたが，起動時だけiptablesコマンド群を発行するようです．<\/p>\n
某所では最終的に，ホストとは別のグローバルipを仮想マシンが持つことになるので，ホストには，<\/p>\n
ifconfig eth0:1 \u30b0\u30ed\u30fc\u30d0\u30ebip2 -netmask 255.255.255.0 up<\/pre>\nとして，このグローバルip2を，DNAT, SNATでホストと通信するゲストのipアドレスを変換します．<\/p>\n","protected":false},"excerpt":{"rendered":"
\u3084\u3063\u3068\uff0c\u30cd\u30c3\u30c8\u306e\u65b9\u3082\u601d\u3063\u305f\u901a\u308a\u306e\u6319\u52d5\u3092\u3057\u3066\u304f\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\uff0e libvirtd\u3092\u8d77\u52d5\u3057\u3066\u304b\u3089\uff0ciptables\u3092\u518d\u5ea6\u5b9a\u7fa9\u3057\u76f4\u3059\u3053\u3068\u3067\uff0ciptables\u95a2\u4fc2\u306e\u30c8\u30e9\u30d6\u30eb\u3092\u56de\u907f\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\uff0e\u3053\u3061\u3089\u304c\u66f8\u304d\u63db\u3048\u305fiptables\u3092libvirtd\u304c\uff0c\u5143\u306b\u623b\u3059\u3088\u3046\u306a\u7c98\u7740\u8cea\u3060\u3063\u305f\u3089\u3069\u3046\u3057\u3088\u3046\u304b\u3068\u601d\u3044\u307e\u3057\u305f\u304c\uff0c\u8d77\u52d5\u6642\u3060\u3051iptables\u30b3\u30de\u30f3\u30c9\u7fa4\u3092\u767a\u884c\u3059\u308b\u3088\u3046\u3067\u3059\uff0e \u67d0\u6240\u3067\u306f\u6700\u7d42\u7684\u306b\uff0c\u30db\u30b9\u30c8\u3068\u306f\u5225\u306e\u30b0\u30ed\u30fc\u30d0\u30ebip\u3092\u4eee\u60f3\u30de\u30b7\u30f3\u304c\u6301\u3064\u3053\u3068\u306b\u306a\u308b\u306e\u3067\uff0c\u30db\u30b9\u30c8\u306b\u306f\uff0c ifconfig eth0:1 \u30b0\u30ed\u30fc\u30d0\u30ebip2 -netmask 255.255.255.0 up \u3068\u3057\u3066\uff0c\u3053\u306e\u30b0\u30ed\u30fc\u30d0\u30ebip2\u3092\uff0cDNAT, SNAT\u3067\u30db\u30b9\u30c8\u3068\u901a\u4fe1\u3059\u308b\u30b2\u30b9\u30c8\u306eip\u30a2\u30c9\u30ec\u30b9\u3092\u5909\u63db\u3057\u307e\u3059\uff0e<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_daextam_enable_autolinks":"","footnotes":""},"categories":[21,8],"tags":[],"class_list":["post-3381","post","type-post","status-publish","format-standard","hentry","category-kvm","category-linux"],"publishpress_future_action":{"enabled":false,"date":"2026-05-21 20:37:38","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/3381","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3381"}],"version-history":[{"count":0,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/3381\/revisions"}],"wp:attachment":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}