[libvirt] [PATCH] bridge_driver: use conffile for dnsmasq if it exists

[Daniel P. Berrange]

On Wed, Dec 22, 2010 at 10:09:54AM +0100, Paweł Krześniak wrote:
> 2010/12/22 Eric Blake <eblake at redhat.com>:
> > On 12/21/2010 03:40 PM, Paweł Krześniak wrote:
> >> This patch adds possibility to run customized DNS/DHCP environment, by
> >> spawning dnsmasq with alternative configuration file if such file exists.
> >> This allows you to set any parameter described in dnsmasq(8).
> >> Configuration file is expected to be located in file named
> >> "<network_name>-dnsmasq.conf" in DNSMASQ_STATE_DIR directory.
> >> If configuration file doesn't exists dnsmasq is spawned as before.
> >
> > You'll want to wait for danpb or DV to comment, but I'm thinking this
> > might be rejected, and that instead, we should consider addressing the
> > issue of what dnsmasq parameters you want to affect, and how we can
> > encode that into the libvirt XML without having to rely on an external
> > dnsmasq conf file.
> 
> I want to create isolated environment for guests - they will be
> connected to one bridge and will use private DNS data. No single
> packet from this isolated network can reach external network - this
> means no 53/udp traffic to resolvers defined in host's
> /etc/resolv.conf.

This sounds like a useful feature for libvirt to directly
support, rather than requiring a hack in a external config
file. eg, Some XML element to indicate whether to enable
DNS proxying or not.

Regards,
Daniel