Using OpenBSD guest as PF firewall

[Thomas Laus]

Jason Tubnor [jason at tubnor.net] wrote:
> On Thu, 5 Nov 2020 at 23:40, Thomas Laus <lausts at acm.org> wrote:
> 
> Review the vm-bhyve man page.  You just need to add an option to
> {guest}.conf file that references the device you are passing through.  The
> section you are looking for is passthruX
> 
> passthru0=Base/Slot/Function.
>
I have that entry and passthru is working fine for me.  It is only the
bridge function that is not working like the Forum article.  The 'vm
switch tap' creation gives me access to the OpenBSD guest, but I still
can't pass internet traffic from the FreeBSD host through the guest
OpenBSD PF and then onto the internet.  The forum article states that it
can be done by using the provided rc.local script.  I was asking for
vm-bhyve assistance to get the same functionality without resorting
to scripting.  Auto guest startup and shutdown is a lot cleaner using
'vm' commands.

Tom


-- 
Public Keys:
PGP KeyID = 0x5F22FDC1
GnuPG KeyID = 0x620836CF