KVM桥接连接不转发端口?

主机和来宾都是CentOS 6. Guest有一个监听端口15672的pipe理面板,我无法从外部访问。

从客人, curl localhost:15672curl vm1:15672给我的面板的预期内容。

我可以ping它

 # ping vm1 PING vm1 (10.2.8.72) 56(84) bytes of data. 64 bytes from 10.2.8.72: icmp_seq=1 ttl=64 time=0.087 ms 

但不能访问面板。

 # curl vm1:15672 curl: (7) couldn't connect to host 

我是按照本页给出的指示,当我到brctl show ,我的输出是略有不同的显示,但我不知道是否相关。

 # brctl show bridge name bridge id STP enabled interfaces br0 8000.842b2b78ff80 no em1 vnet0 virbr0 8000.5254000ea9ec yes virbr0-nic 

还有来自virsh的xmldump

 <domain type='kvm' id='1'> <name>vm-queue</name> <uuid>f3d4a6e7-c4b7-97ea-7970-e7dbe0f6964c</uuid> <memory unit='KiB'>2097152</memory> <currentMemory unit='KiB'>2097152</currentMemory> <vcpu placement='static'>2</vcpu> <os> <type arch='x86_64' machine='rhel6.6.0'>hvm</type> <boot dev='hd'/> </os> <features> <acpi/> <apic/> <pae/> </features> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>restart</on_crash> <devices> <emulator>/usr/libexec/qemu-kvm</emulator> <disk type='file' device='disk'> <driver name='qemu' type='raw' cache='none'/> <source file='/var/kvm/images/vm-queue.img'/> <target dev='vda' bus='virtio'/> <alias name='virtio-disk0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> </disk> <disk type='block' device='cdrom'> <driver name='qemu' type='raw'/> <target dev='hdc' bus='ide'/> <readonly/> <alias name='ide0-1-0'/> <address type='drive' controller='0' bus='1' target='0' unit='0'/> </disk> <controller type='usb' index='0' model='ich9-ehci1'> <alias name='usb0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x7'/> </controller> <controller type='usb' index='0' model='ich9-uhci1'> <alias name='usb0'/> <master startport='0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0' multifunction='on'/> </controller> <controller type='usb' index='0' model='ich9-uhci2'> <alias name='usb0'/> <master startport='2'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x1'/> </controller> <controller type='usb' index='0' model='ich9-uhci3'> <alias name='usb0'/> <master startport='4'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x2'/> </controller> <controller type='ide' index='0'> <alias name='ide0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/> </controller> <interface type='bridge'> <mac address='52:54:00:6d:25:24'/> <source bridge='br0'/> <target dev='vnet0'/> <model type='virtio'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <serial type='pty'> <source path='/dev/pts/1'/> <target port='0'/> <alias name='serial0'/> </serial> <console type='pty' tty='/dev/pts/1'> <source path='/dev/pts/1'/> <target type='serial' port='0'/> <alias name='serial0'/> </console> <input type='tablet' bus='usb'> <alias name='input0'/> </input> <memballoon model='virtio'> <alias name='balloon0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/> </memballoon> </devices> <seclabel type='dynamic' model='selinux' relabel='yes'> <label>system_u:system_r:svirt_t:s0:c47,c569</label> <imagelabel>system_u:object_r:svirt_image_t:s0:c47,c569</imagelabel> </seclabel> </domain> 

我相信你们都需要更多的信息,但是我不了解这个问题。

我错过了什么?

这个问题最终成为来宾防火墙阻止应用程序端口,而不是kvm或桥接相关