public inbox for passt-user@passt.top
 help / color / mirror / Atom feed
From: Niklas Beierl <no.shoes@posteo.net>
To: passt-user@passt.top
Subject: Passt port forwards to guest when host is "offline"
Date: Sun, 10 May 2026 13:40:56 +0000	[thread overview]
Message-ID: <ca6e16de-771b-4e58-8c35-2a1acbc03473@posteo.net> (raw)

Hello,

I hope I am not violating any mailinglist etiquette. I am not too 
familiar with this way of communicating and I haven't found a guide for 
passts list. Please feel free to point me out.

I have the following Problem: I have a libvirt VM using passt as 
usermode networking backend. I set up a port-forward to access a service 
on the VM. In principle, this setup serves me well. There is just one 
edge-case that is very unergonomic:
When the VM boots while the host (laptop) is offline, the VM get's no IP 
either and the the port-forward doesn't work since passt has no IP to 
forward to.

35.2917: ERROR:   Flow 0 (INI): No rules to forward HOST TCP 
[127.0.0.1]:42336 -> [127.0.0.1]:3389

This unfortunately happens quite frequently because I travel a lot. I 
know this scenario doesn't really have an obvious, well defined 
solution, because passt is supposed to just make the guest believe it 
has the same ip as the host and in this case the host has no ip. A few 
things I have considered:

Assigning an additional, static IP to the guest and somehow forcing 
traffic for it to passt. Not sure if/how this would work.
Assigning an additional, static IP on some host interface, hoping passt 
will pick it up and advertise it via DHCP?
Am I missing a more elegant approach?

I was also thinking that it would perhaps be cool if passt could make 
port-forwards for localhost connections work irrespective of whether the 
host otherwise has network connectivity. Haven't thought it 100% 
through, but if 127.0.0.1/8 is src and dst of the connection, there is 
no broken return route on the guest or anything so in theory this should 
be possible I guess? I'd be happy to bounce ideas back and forth.

For reference: The interface definition:

     <interface type='user'>
       <mac address='52:54:00:16:63:9f'/>
       <portForward proto='tcp'>
         <range start='3389'/>
       </portForward>
       <model type='e1000e'/>
       <backend type='passt' logFile='/tmp/win11passt.log'/>
       <address type='pci' domain='0x0000' bus='0x01' slot='0x00' 
function='0x0'/>
     </interface>

Best

Niklas


             reply	other threads:[~2026-05-10 13:40 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-05-10 13:40 Niklas Beierl [this message]
2026-05-11 11:24 ` David Gibson
2026-05-11 12:52   ` Niklas Beierl
2026-05-12  0:49     ` David Gibson
2026-05-11 13:06   ` Stefano Brivio

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ca6e16de-771b-4e58-8c35-2a1acbc03473@posteo.net \
    --to=no.shoes@posteo.net \
    --cc=passt-user@passt.top \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).