Forward traffic between two libvirt NAT bridges (firewalld nftables)

On RHEL with firewalld’s nftables backend, allowing one libvirt VM network to reach another is not a classic firewall-cmd --direct problem anymore. Libvirt installs its own ip libvirt_network table, and that is what rejects NEW traffic between bridges. ...

28 July 2026 · 5 min · 919 words · Stephane V.