> The networkUpdate() method in libvirt source will recreate firewall
> rules if any DHCP hosts change. This is because the firewall rules
> differ when there is zero vs non-zero number of DHCP hosts present.
>
> This could be optimized to only recreate when going from zero to
> non-zero or vica-ve
On Wed, Sep 09, 2020 at 06:31:41PM +0200, Joel Colledge wrote:
> ## Conclusion
>
> The underlying problem seems to be that net-update removes and
> re-creates the iptables rules, even when it makes no changes to them.
> The best fix would be to correct that.
>
> Has anyone else encountered this s
