Using OpenBSD guest as PF firewall

[Jason Tubnor]

On Thu, 5 Nov 2020 at 23:40, Thomas Laus <lausts at acm.org> wrote:

>
> My question to this list was how this can be done using vm-bhyve
> commands.  This 'how-to' showed the traditional scripting method and I
> would prefer using the 'vm' commands.  The tap0 created as part of the
> 'vm switch' utility, is able to make the connection to the OpenBSD guest
> 'vio0'.  The OpenBSD guest is also able to make the connection to 'tap0'
> on the FreeBSD host.  The OpenBSD guest has normal internet connections
> to the world using the NIC that was passed through.  The FreeBSD host is
> not able to make any other connections anywhere other than to the
> OpenBSD guest.  This forum article says it is possible.  I just need a
> handbook reference or a 'how-to' writeup for doing this using the
> vm-bhyve utility.
>

Review the vm-bhyve man page.  You just need to add an option to
{guest}.conf file that references the device you are passing through.  The
section you are looking for is passthruX

passthru0=Base/Slot/Function.

Cheers,

Jason.