diff --git a/docs/news.xml b/docs/news.xml index 5c3028e10b41de6f769ca3d17105352615856871..83e965e0f33d98f8ce18671870f5388f71953c85 100644 --- a/docs/news.xml +++ b/docs/news.xml @@ -124,6 +124,18 @@ Report class information for PCI node device capability. + + + Split setup of IPv4 and IPv6 top level chain + + + The requirement resulting from private chains improvement done + in v5.1.0 was refined so that only tables from + corresponding IP version are required. This means that if a + network doesn't have IPv6 enabled then those + tables are not required. + +
@@ -202,7 +214,9 @@ Historically firewall rules for virtual networks were added straight into the base chains. This works but has a number of bugs and design limitations. To address them, libvirt now puts - firewall rules into its own chains. + firewall rules into its own chains. Note that with this change the + filter, nat and mangle tables + are required for both IPv4 and IPv6.