KVM guestVM 포트포워딩 - firewalld

sysctl net.ipv4.ip_forward //포워딩 가능여부 확인, net.ipv4.ip_forward = 1 이 나와야 함
firewall-cmd --permanent --zone=public --add-interface=eth0 //eth0은 예
firewall-cmd --zone=public --add-masquerade
firewall-cmd --zone=public --add-forward-port=port=80:proto=tcp:toport=8080 //80번을 guest의 8080으로 포워딩한다고 가정
firewall-cmd --zone=public --add-forward-port=port=80:proto=tcp:toport=8080:toaddr=192.168.122.229 //192.168.122.229는 guest 아이피 예
KVM 연결설정 XML에서,
<forward mode=”nat”/>
...
</forward>
를,
<forward mode=”route”/>
...
</forward>
로 수정한다.