From: Niklas Beierl <no.shoes@posteo.net>
To: passt-user@passt.top
Subject: Passt port forwards to guest when host is "offline"
Date: Sun, 10 May 2026 13:40:56 +0000 [thread overview]
Message-ID: <ca6e16de-771b-4e58-8c35-2a1acbc03473@posteo.net> (raw)
Hello,
I hope I am not violating any mailinglist etiquette. I am not too
familiar with this way of communicating and I haven't found a guide for
passts list. Please feel free to point me out.
I have the following Problem: I have a libvirt VM using passt as
usermode networking backend. I set up a port-forward to access a service
on the VM. In principle, this setup serves me well. There is just one
edge-case that is very unergonomic:
When the VM boots while the host (laptop) is offline, the VM get's no IP
either and the the port-forward doesn't work since passt has no IP to
forward to.
35.2917: ERROR: Flow 0 (INI): No rules to forward HOST TCP
[127.0.0.1]:42336 -> [127.0.0.1]:3389
This unfortunately happens quite frequently because I travel a lot. I
know this scenario doesn't really have an obvious, well defined
solution, because passt is supposed to just make the guest believe it
has the same ip as the host and in this case the host has no ip. A few
things I have considered:
Assigning an additional, static IP to the guest and somehow forcing
traffic for it to passt. Not sure if/how this would work.
Assigning an additional, static IP on some host interface, hoping passt
will pick it up and advertise it via DHCP?
Am I missing a more elegant approach?
I was also thinking that it would perhaps be cool if passt could make
port-forwards for localhost connections work irrespective of whether the
host otherwise has network connectivity. Haven't thought it 100%
through, but if 127.0.0.1/8 is src and dst of the connection, there is
no broken return route on the guest or anything so in theory this should
be possible I guess? I'd be happy to bounce ideas back and forth.
For reference: The interface definition:
<interface type='user'>
<mac address='52:54:00:16:63:9f'/>
<portForward proto='tcp'>
<range start='3389'/>
</portForward>
<model type='e1000e'/>
<backend type='passt' logFile='/tmp/win11passt.log'/>
<address type='pci' domain='0x0000' bus='0x01' slot='0x00'
function='0x0'/>
</interface>
Best
Niklas
next reply other threads:[~2026-05-10 13:40 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-10 13:40 Niklas Beierl [this message]
2026-05-11 11:24 ` David Gibson
2026-05-11 12:52 ` Niklas Beierl
2026-05-12 0:49 ` David Gibson
2026-05-11 13:06 ` Stefano Brivio
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ca6e16de-771b-4e58-8c35-2a1acbc03473@posteo.net \
--to=no.shoes@posteo.net \
--cc=passt-user@passt.top \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).