[ovirt-users] Port mirroring outside traffic into a VM?

[Dan Kenigsberg]

On Sun, Feb 15, 2015 at 01:11:20PM -0600, Chris Adams wrote:
> Once upon a time, Genadi Chereshnya <gcheresh at redhat.com> said:
> > If I understand you correctly you are trying to replace the physical device mirroring with VM?
> 
> Yes, that is correct.
> 
> > If this is the case I don't think it's possible to do it with port mirroring oVIRT feature.
> > The existing oVIRT port mirroing feature is for mirroring traffic between VM devices for specific Network.
> > So if you have 3 VMs with network <X> you can monitor on 1 VM that specific network that is used between 2 other VMs.
> 
> Ah, I see.
> 
> Is there a way to get an external network interface (that happens to be
> a target of an external switch's port mirror/monitor session) to pass
> through to a VM?  A way that still allows for live migration would be
> best of course, but even without that would be a start.

We plan to support passthrough natively in ovirt-3.6.
Until then, you need to do this yourself, with the help of vdsm hooks.
http://libvirt.org/formatdomain.html#elementsNICS