aboutgitcodebugslistschat
path: root/README.md
diff options
context:
space:
mode:
authorStefano Brivio <sbrivio@redhat.com>2022-11-04 02:38:31 +0100
committerStefano Brivio <sbrivio@redhat.com>2022-11-04 12:04:32 +0100
commit11efaefa1edc340fc3948726893ff81630370744 (patch)
tree4c3eb91e641f1f81abd5b26132a549105e867933 /README.md
parent6c1697764ccd0ae0596fcad0ad5c8434430f8b23 (diff)
downloadpasst-11efaefa1edc340fc3948726893ff81630370744.tar
passt-11efaefa1edc340fc3948726893ff81630370744.tar.gz
passt-11efaefa1edc340fc3948726893ff81630370744.tar.bz2
passt-11efaefa1edc340fc3948726893ff81630370744.tar.lz
passt-11efaefa1edc340fc3948726893ff81630370744.tar.xz
passt-11efaefa1edc340fc3948726893ff81630370744.tar.zst
passt-11efaefa1edc340fc3948726893ff81630370744.zip
passt, qrap, README: Update notes and documentation for AF_UNIX support in qemu
We can't get rid of qrap quite yet, but at least we should start telling users it's not going to be needed anymore starting from qemu 7.2. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'README.md')
-rw-r--r--README.md10
1 files changed, 4 insertions, 6 deletions
diff --git a/README.md b/README.md
index e1df972..0e2ca78 100644
--- a/README.md
+++ b/README.md
@@ -368,13 +368,11 @@ speeding up local connections, and usually requiring NAT. _pasta_:
## Interfaces and Environment
_passt_ exchanges packets with _qemu_ via UNIX domain socket, using the `socket`
-back-end in qemu. Currently, qemu can only connect to a listening process via
-TCP. Two temporary solutions are available:
+back-end in qemu. This is supported since qemu 7.2.
-* a [patch](/passt/tree/qemu) for qemu
-* a wrapper, [qrap](/passt/tree/qrap.c), that connects to a
- UNIX domain socket and starts qemu, which can now use the file descriptor
- that's already opened
+For older versions, the [qrap](/passt/tree/qrap.c) wrapper can be used to
+connect to a UNIX domain socket and to start qemu, which can now use the file
+descriptor that's already opened.
This approach, compared to using a _tap_ device, doesn't require any security
capabilities, as we don't need to create any interface.