promiscous mode enabled ?

KVM
1

On my system with libvirt, KVM and Qemu installed, no special configuration, some of my interfaces have promiscuous mode enabled and I am wondering why and whether or not this could be considered a security risk ? @patrick @HulaHoop

Interfaces created by libvirt whom have promiscuous mode enabled (I ran ip -d link):

  • vnet0
  • vnet1
  • vnet14
  • vnet15

Thoughts on this? more information?

2

Promiscuous mode IIRC facilitates the seamless transfer of packets from one IP to another and is usually enabled in bridge mode networks. This helps routing guest originating data via the host NIC despite it not having its own separate IP on the physical LAN.