NuKVM/libvirt
3
0
Fork 0
mirror of https://github.com/libvirt/libvirt.git synced 2025-02-25 18:55:26 -06:00
Code Issues Packages Projects Releases Wiki Activity

docs: migration: Add a mention of VIR_MIGRATE_TLS and its enforcement for qemu

Browse Source 
Mention the flag to enable TLS and also the knob to enforce it in the
qemu hypervisor driver.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
This commit is contained in:
Peter Krempa 2020-11-24 14:49:14 +01:00
parent 4a3c80a668
commit 5245a7ae4c
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/migration.html.in
View File

@ -31,6 +31,14 @@
of ports on the firewall to allow multiple concurrent migration operations. of ports on the firewall to allow multiple concurrent migration operations.
</p> </p>
<p>
Modern hypervisors support TLS for encryption and authentication of the
migration connections which can be enabled using the
<code>VIR_MIGRATE_TLS</code> flag. The <em>qemu</em> hypervisor driver
allows users to force use of TLS via the <code>migrate_tls_force</code>
knob configured in <code>/etc/libvirt/qemu.conf</code>.
</p>
<p> <p>
<img class="diagram" src="migration-native.png" alt="Migration native path"/> <img class="diagram" src="migration-native.png" alt="Migration native path"/>
</p> </p>