9 { 'include': 'sockets.json' }
14 # Sets the link status of a virtual network adapter.
16 # @name: the device name of the virtual network adapter
18 # @up: true to set the link status to be up
21 # - If @name is not a valid network device, DeviceNotFound
25 # .. note:: Not all network adapters support setting link status. This
26 # command will succeed even if the network adapter does not support
27 # link status notification.
31 # -> { "execute": "set_link",
32 # "arguments": { "name": "e1000.0", "up": false } }
35 { 'command': 'set_link', 'data': {'name': 'str', 'up': 'bool'} }
40 # Add a network backend.
42 # Additional arguments depend on the type.
47 # - If @type is not a valid network backend, DeviceNotFound
51 # -> { "execute": "netdev_add",
52 # "arguments": { "type": "user", "id": "netdev1",
53 # "dnssearch": [ { "str": "example.org" } ] } }
56 { 'command': 'netdev_add', 'data': 'Netdev', 'boxed': true,
57 'allow-preconfig': true }
62 # Remove a network backend.
64 # @id: the name of the network backend to remove
67 # - If @id is not a valid network backend, DeviceNotFound
73 # -> { "execute": "netdev_del", "arguments": { "id": "netdev1" } }
76 { 'command': 'netdev_del', 'data': {'id': 'str'},
77 'allow-preconfig': true }
80 # @NetLegacyNicOptions:
82 # Create a new Network Interface Card.
84 # @netdev: id of -netdev to connect to
86 # @macaddr: MAC address
88 # @model: device model (e1000, rtl8139, virtio etc.)
90 # @addr: PCI device address
92 # @vectors: number of MSI-x vectors, 0 to disable MSI-X
96 { 'struct': 'NetLegacyNicOptions',
102 '*vectors': 'uint32' } }
107 # A fat type wrapping 'str', to be embedded in lists.
111 { 'struct': 'String',
116 # @NetdevUserOptions:
118 # Use the user mode network stack which requires no administrator
121 # @hostname: client hostname reported by the builtin DHCP server
123 # @restrict: isolate the guest from the host
125 # @ipv4: whether to support IPv4, default true for enabled (since 2.6)
127 # @ipv6: whether to support IPv6, default true for enabled (since 2.6)
129 # @ip: legacy parameter, use net= instead
131 # @net: IP network address that the guest will see, in the form
132 # addr[/netmask] The netmask is optional, and can be either in the
133 # form a.b.c.d or as a number of valid top-most bits. Default is
136 # @host: guest-visible address of the host
138 # @tftp: root directory of the built-in TFTP server
140 # @bootfile: BOOTP filename, for use with tftp=
142 # @dhcpstart: the first of the 16 IPs the built-in DHCP server can
145 # @dns: guest-visible address of the virtual nameserver
147 # @dnssearch: list of DNS suffixes to search, passed as DHCP option to
150 # @domainname: guest-visible domain name of the virtual nameserver
153 # @ipv6-prefix: IPv6 network prefix (default is fec0::) (since 2.6).
154 # The network prefix is given in the usual hexadecimal IPv6
157 # @ipv6-prefixlen: IPv6 network prefix length (default is 64) (since
160 # @ipv6-host: guest-visible IPv6 address of the host (since 2.6)
162 # @ipv6-dns: guest-visible IPv6 address of the virtual nameserver
165 # @smb: root directory of the built-in SMB server
167 # @smbserver: IP address of the built-in SMB server
169 # @hostfwd: redirect incoming TCP or UDP host connections to guest
172 # @guestfwd: forward guest TCP connections
174 # @tftp-server-name: RFC2132 "TFTP server name" string (Since 3.1)
178 { 'struct': 'NetdevUserOptions',
191 '*dnssearch': ['String'],
192 '*domainname': 'str',
193 '*ipv6-prefix': 'str',
194 '*ipv6-prefixlen': 'int',
199 '*hostfwd': ['String'],
200 '*guestfwd': ['String'],
201 '*tftp-server-name': 'str' } }
206 # Used to configure a host TAP network interface backend.
208 # @ifname: interface name
210 # @fd: file descriptor of an already opened tap
212 # @fds: multiple file descriptors of already opened multiqueue capable
215 # @script: script to initialize the interface
217 # @downscript: script to shut down the interface
219 # @br: bridge name (since 2.8)
221 # @helper: command to execute to configure bridge
223 # @sndbuf: send buffer limit. Understands [TGMKkb] suffixes.
225 # @vnet_hdr: enable the IFF_VNET_HDR flag on the tap interface
227 # @vhost: enable vhost-net network accelerator
229 # @vhostfd: file descriptor of an already opened vhost net device
231 # @vhostfds: file descriptors of multiple already opened vhost net
234 # @vhostforce: vhost on for non-MSIX virtio guests
236 # @queues: number of queues to be created for multiqueue capable tap
238 # @poll-us: maximum number of microseconds that could be spent on busy
239 # polling for tap (since 2.7)
243 { 'struct': 'NetdevTapOptions',
249 '*downscript': 'str',
257 '*vhostforce': 'bool',
259 '*poll-us': 'uint32'} }
262 # @NetdevSocketOptions:
264 # Socket netdevs are used to establish a network connection to another
265 # QEMU virtual machine via a TCP socket.
267 # @fd: file descriptor of an already opened socket
269 # @listen: port number, and optional hostname, to listen on
271 # @connect: port number, and optional hostname, to connect to
273 # @mcast: UDP multicast address and port number
275 # @localaddr: source address and port for multicast and udp packets
277 # @udp: UDP unicast address and port number
281 { 'struct': 'NetdevSocketOptions',
291 # @NetdevL2TPv3Options:
293 # Configure an Ethernet over L2TPv3 tunnel.
295 # @src: source address
297 # @dst: destination address
299 # @srcport: source port - mandatory for udp, optional for ip
301 # @dstport: destination port - mandatory for udp, optional for ip
303 # @ipv6: force the use of ipv6
305 # @udp: use the udp version of l2tpv3 encapsulation
307 # @cookie64: use 64 bit cookies
309 # @counter: have sequence counter
311 # @pincounter: pin sequence counter to zero - workaround for buggy
312 # implementations or networks with packet reorder
314 # @txcookie: 32 or 64 bit transmit cookie
316 # @rxcookie: 32 or 64 bit receive cookie
318 # @txsession: 32 bit transmit session
320 # @rxsession: 32 bit receive session - if not specified set to the
321 # same value as transmit
323 # @offset: additional offset - allows the insertion of additional
324 # application-specific data before the packet payload
328 { 'struct': 'NetdevL2TPv3Options',
338 '*pincounter': 'bool',
339 '*txcookie': 'uint64',
340 '*rxcookie': 'uint64',
341 'txsession': 'uint32',
342 '*rxsession': 'uint32',
343 '*offset': 'uint32' } }
348 # Connect to a vde switch running on the host.
354 # @group: group owner of socket
356 # @mode: permissions for socket
360 { 'struct': 'NetdevVdeOptions',
365 '*mode': 'uint16' } }
368 # @NetdevBridgeOptions:
370 # Connect a host TAP network interface to a host bridge device.
374 # @helper: command to execute to configure bridge
378 { 'struct': 'NetdevBridgeOptions',
384 # @NetdevHubPortOptions:
386 # Connect two or more net clients through a software hub.
388 # @hubid: hub identifier number
390 # @netdev: used to connect hub to a netdev instead of a device (since
395 { 'struct': 'NetdevHubPortOptions',
401 # @NetdevNetmapOptions:
403 # Connect a client to a netmap-enabled NIC or to a VALE switch port
405 # @ifname: Either the name of an existing network interface supported
406 # by netmap, or the name of a VALE port (created on the fly). A
407 # VALE port name is in the form 'valeXXX:YYY', where XXX and YYY
408 # are non-negative integers. XXX identifies a switch and YYY
409 # identifies a port of the switch. VALE ports having the same XXX
410 # are therefore connected to the same switch.
412 # @devname: path of the netmap device (default: '/dev/netmap').
416 { 'struct': 'NetdevNetmapOptions',
419 '*devname': 'str' } }
424 # Attach mode for a default XDP program
426 # @skb: generic mode, no driver support necessary
428 # @native: DRV mode, program is attached to a driver, packets are
429 # passed to the socket without allocation of skb.
433 { 'enum': 'AFXDPMode',
434 'data': [ 'native', 'skb' ],
435 'if': 'CONFIG_AF_XDP' }
438 # @NetdevAFXDPOptions:
440 # AF_XDP network backend
442 # @ifname: The name of an existing network interface.
444 # @mode: Attach mode for a default XDP program. If not specified,
445 # then 'native' will be tried first, then 'skb'.
447 # @force-copy: Force XDP copy mode even if device supports zero-copy.
450 # @queues: number of queues to be used for multiqueue interfaces
453 # @start-queue: Use @queues starting from this queue number
456 # @inhibit: Don't load a default XDP program, use one already loaded
457 # to the interface (default: false). Requires @sock-fds.
459 # @sock-fds: A colon (:) separated list of file descriptors for
460 # already open but not bound AF_XDP sockets in the queue order.
461 # One fd per queue. These descriptors should already be added
462 # into XDP socket map for corresponding queues. Requires
467 { 'struct': 'NetdevAFXDPOptions',
470 '*mode': 'AFXDPMode',
471 '*force-copy': 'bool',
473 '*start-queue': 'int',
475 '*sock-fds': 'str' },
476 'if': 'CONFIG_AF_XDP' }
479 # @NetdevVhostUserOptions:
481 # Vhost-user network backend
483 # @chardev: name of a unix socket chardev
485 # @vhostforce: vhost on for non-MSIX virtio guests (default: false).
487 # @queues: number of queues to be created for multiqueue vhost-user
488 # (default: 1) (Since 2.5)
492 { 'struct': 'NetdevVhostUserOptions',
495 '*vhostforce': 'bool',
499 # @NetdevVhostVDPAOptions:
501 # Vhost-vdpa network backend
503 # vDPA device is a device that uses a datapath which complies with the
504 # virtio specifications with a vendor specific control path.
506 # @vhostdev: path of vhost-vdpa device (default:'/dev/vhost-vdpa-0')
508 # @vhostfd: file descriptor of an already opened vhost vdpa device
510 # @queues: number of queues to be created for multiqueue vhost-vdpa
513 # @x-svq: Start device with (experimental) shadow virtqueue. (Since
514 # 7.1) (default: false)
518 # @unstable: Member @x-svq is experimental.
522 { 'struct': 'NetdevVhostVDPAOptions',
527 '*x-svq': {'type': 'bool', 'features' : [ 'unstable'] } } }
530 # @NetdevVmnetHostOptions:
532 # vmnet (host mode) network backend.
534 # Allows the vmnet interface to communicate with other vmnet
535 # interfaces that are in host mode and also with the host.
537 # @start-address: The starting IPv4 address to use for the interface.
538 # Must be in the private IP range (RFC 1918). Must be specified
539 # along with @end-address and @subnet-mask. This address is used
540 # as the gateway address. The subsequent address up to and
541 # including end-address are placed in the DHCP pool.
543 # @end-address: The DHCP IPv4 range end address to use for the
544 # interface. Must be in the private IP range (RFC 1918). Must be
545 # specified along with @start-address and @subnet-mask.
547 # @subnet-mask: The IPv4 subnet mask to use on the interface. Must be
548 # specified along with @start-address and @subnet-mask.
550 # @isolated: Enable isolation for this interface. Interface isolation
551 # ensures that vmnet interface is not able to communicate with any
552 # other vmnet interfaces. Only communication with host is
553 # allowed. Requires at least macOS Big Sur 11.0.
555 # @net-uuid: The identifier (UUID) to uniquely identify the isolated
556 # network vmnet interface should be added to. If set, no DHCP
557 # service is provided for this interface and network communication
558 # is allowed only with other interfaces added to this network
559 # identified by the UUID. Requires at least macOS Big Sur 11.0.
563 { 'struct': 'NetdevVmnetHostOptions',
565 '*start-address': 'str',
566 '*end-address': 'str',
567 '*subnet-mask': 'str',
569 '*net-uuid': 'str' },
570 'if': 'CONFIG_VMNET' }
573 # @NetdevVmnetSharedOptions:
575 # vmnet (shared mode) network backend.
577 # Allows traffic originating from the vmnet interface to reach the
578 # Internet through a network address translator (NAT). The vmnet
579 # interface can communicate with the host and with other shared mode
580 # interfaces on the same subnet. If no DHCP settings, subnet mask and
581 # IPv6 prefix specified, the interface can communicate with any of
582 # other interfaces in shared mode.
584 # @start-address: The starting IPv4 address to use for the interface.
585 # Must be in the private IP range (RFC 1918). Must be specified
586 # along with @end-address and @subnet-mask. This address is used
587 # as the gateway address. The subsequent address up to and
588 # including end-address are placed in the DHCP pool.
590 # @end-address: The DHCP IPv4 range end address to use for the
591 # interface. Must be in the private IP range (RFC 1918). Must be
592 # specified along with @start-address and @subnet-mask.
594 # @subnet-mask: The IPv4 subnet mask to use on the interface. Must be
595 # specified along with @start-address and @subnet-mask.
597 # @isolated: Enable isolation for this interface. Interface isolation
598 # ensures that vmnet interface is not able to communicate with any
599 # other vmnet interfaces. Only communication with host is
600 # allowed. Requires at least macOS Big Sur 11.0.
602 # @nat66-prefix: The IPv6 prefix to use into guest network. Must be a
603 # unique local address i.e. start with fd00::/8 and have length of
608 { 'struct': 'NetdevVmnetSharedOptions',
610 '*start-address': 'str',
611 '*end-address': 'str',
612 '*subnet-mask': 'str',
614 '*nat66-prefix': 'str' },
615 'if': 'CONFIG_VMNET' }
618 # @NetdevVmnetBridgedOptions:
620 # vmnet (bridged mode) network backend.
622 # Bridges the vmnet interface with a physical network interface.
624 # @ifname: The name of the physical interface to be bridged.
626 # @isolated: Enable isolation for this interface. Interface isolation
627 # ensures that vmnet interface is not able to communicate with any
628 # other vmnet interfaces. Only communication with host is
629 # allowed. Requires at least macOS Big Sur 11.0.
633 { 'struct': 'NetdevVmnetBridgedOptions',
636 '*isolated': 'bool' },
637 'if': 'CONFIG_VMNET' }
640 # @NetdevStreamOptions:
642 # Configuration info for stream socket netdev
644 # @addr: socket address to listen on (server=true) or connect to
647 # @server: create server socket (default: false)
649 # @reconnect: For a client socket, if a socket is disconnected, then
650 # attempt a reconnect after the given number of seconds. Setting
651 # this to zero disables this function. (default: 0) (since 8.0)
653 # Only SocketAddress types 'unix', 'inet' and 'fd' are supported.
657 { 'struct': 'NetdevStreamOptions',
659 'addr': 'SocketAddress',
661 '*reconnect': 'uint32' } }
664 # @NetdevDgramOptions:
666 # Configuration info for datagram socket netdev.
668 # @remote: remote address
670 # @local: local address
672 # Only SocketAddress types 'unix', 'inet' and 'fd' are supported.
674 # If remote address is present and it's a multicast address, local
675 # address is optional. Otherwise local address is required and remote
676 # address is optional.
678 # .. table:: Valid parameters combination table
681 # ============= ======== =====
683 # ============= ======== =====
687 # multicast absent yes
688 # multicast present yes
689 # not multicast absent no
690 # not multicast present yes
691 # ============= ======== =====
695 { 'struct': 'NetdevDgramOptions',
697 '*local': 'SocketAddress',
698 '*remote': 'SocketAddress' } }
703 # Available netdev drivers.
706 # @vhost-vdpa: since 5.1
707 # @vmnet-host: since 7.1
708 # @vmnet-shared: since 7.1
709 # @vmnet-bridged: since 7.1
716 { 'enum': 'NetClientDriver',
717 'data': [ 'none', 'nic', 'user', 'tap', 'l2tpv3', 'socket', 'stream',
718 'dgram', 'vde', 'bridge', 'hubport', 'netmap', 'vhost-user',
720 { 'name': 'af-xdp', 'if': 'CONFIG_AF_XDP' },
721 { 'name': 'vmnet-host', 'if': 'CONFIG_VMNET' },
722 { 'name': 'vmnet-shared', 'if': 'CONFIG_VMNET' },
723 { 'name': 'vmnet-bridged', 'if': 'CONFIG_VMNET' }] }
728 # Captures the configuration of a network device.
730 # @id: identifier for monitor commands.
732 # @type: Specify the driver used for interpreting remaining arguments.
737 'base': { 'id': 'str', 'type': 'NetClientDriver' },
738 'discriminator': 'type',
740 'nic': 'NetLegacyNicOptions',
741 'user': 'NetdevUserOptions',
742 'tap': 'NetdevTapOptions',
743 'l2tpv3': 'NetdevL2TPv3Options',
744 'socket': 'NetdevSocketOptions',
745 'stream': 'NetdevStreamOptions',
746 'dgram': 'NetdevDgramOptions',
747 'vde': 'NetdevVdeOptions',
748 'bridge': 'NetdevBridgeOptions',
749 'hubport': 'NetdevHubPortOptions',
750 'netmap': 'NetdevNetmapOptions',
751 'af-xdp': { 'type': 'NetdevAFXDPOptions',
752 'if': 'CONFIG_AF_XDP' },
753 'vhost-user': 'NetdevVhostUserOptions',
754 'vhost-vdpa': 'NetdevVhostVDPAOptions',
755 'vmnet-host': { 'type': 'NetdevVmnetHostOptions',
756 'if': 'CONFIG_VMNET' },
757 'vmnet-shared': { 'type': 'NetdevVmnetSharedOptions',
758 'if': 'CONFIG_VMNET' },
759 'vmnet-bridged': { 'type': 'NetdevVmnetBridgedOptions',
760 'if': 'CONFIG_VMNET' } } }
765 # Packets receiving state
767 # @normal: filter assigned packets according to the mac-table
769 # @none: don't receive any assigned packet
771 # @all: receive all assigned packets
775 { 'enum': 'RxState', 'data': [ 'normal', 'none', 'all' ] }
780 # Rx-filter information for a NIC.
782 # @name: net client name
784 # @promiscuous: whether promiscuous mode is enabled
786 # @multicast: multicast receive state
788 # @unicast: unicast receive state
790 # @vlan: vlan receive state (Since 2.0)
792 # @broadcast-allowed: whether to receive broadcast
794 # @multicast-overflow: multicast table is overflowed or not
796 # @unicast-overflow: unicast table is overflowed or not
798 # @main-mac: the main macaddr string
800 # @vlan-table: a list of active vlan id
802 # @unicast-table: a list of unicast macaddr string
804 # @multicast-table: a list of multicast macaddr string
808 { 'struct': 'RxFilterInfo',
811 'promiscuous': 'bool',
812 'multicast': 'RxState',
813 'unicast': 'RxState',
815 'broadcast-allowed': 'bool',
816 'multicast-overflow': 'bool',
817 'unicast-overflow': 'bool',
819 'vlan-table': ['int'],
820 'unicast-table': ['str'],
821 'multicast-table': ['str'] }}
826 # Return rx-filter information for all NICs (or for the given NIC).
828 # @name: net client name
830 # Returns: list of @RxFilterInfo for all NICs (or for the given NIC).
833 # - if the given @name doesn't exist
834 # - if the given NIC doesn't support rx-filter querying
835 # - if the given net client isn't a NIC
841 # -> { "execute": "query-rx-filter", "arguments": { "name": "vnet0" } }
844 # "promiscuous": true,
846 # "main-mac": "52:54:00:12:34:56",
847 # "unicast": "normal",
855 # "multicast": "normal",
856 # "multicast-overflow": false,
857 # "unicast-overflow": false,
858 # "multicast-table": [
859 # "01:00:5e:00:00:01",
860 # "33:33:00:00:00:01",
861 # "33:33:ff:12:34:56"
863 # "broadcast-allowed": false
868 { 'command': 'query-rx-filter',
869 'data': { '*name': 'str' },
870 'returns': ['RxFilterInfo'] }
873 # @NIC_RX_FILTER_CHANGED:
875 # Emitted once until the 'query-rx-filter' command is executed, the
876 # first event will always be emitted
878 # @name: net client name
886 # <- { "event": "NIC_RX_FILTER_CHANGED",
887 # "data": { "name": "vnet0",
888 # "path": "/machine/peripheral/vnet0/virtio-backend" },
889 # "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
891 { 'event': 'NIC_RX_FILTER_CHANGED',
892 'data': { '*name': 'str', 'path': 'str' } }
895 # @AnnounceParameters:
897 # Parameters for self-announce timers
899 # @initial: Initial delay (in ms) before sending the first GARP/RARP
902 # @max: Maximum delay (in ms) between GARP/RARP announcement packets
904 # @rounds: Number of self-announcement attempts
906 # @step: Delay increase (in ms) after each self-announcement attempt
908 # @interfaces: An optional list of interface names, which restricts
909 # the announcement to the listed interfaces. (Since 4.1)
911 # @id: A name to be used to identify an instance of announce-timers
912 # and to allow it to modified later. Not for use as part of the
913 # migration parameters. (Since 4.1)
918 { 'struct': 'AnnounceParameters',
919 'data': { 'initial': 'int',
923 '*interfaces': ['str'],
929 # Trigger generation of broadcast RARP frames to update network
930 # switches. This can be useful when network bonds fail-over the
935 # -> { "execute": "announce-self",
937 # "initial": 50, "max": 550, "rounds": 10, "step": 50,
938 # "interfaces": ["vn2", "vn3"], "id": "bob" } }
939 # <- { "return": {} }
943 { 'command': 'announce-self', 'boxed': true,
944 'data' : 'AnnounceParameters'}
947 # @FAILOVER_NEGOTIATED:
949 # Emitted when VIRTIO_NET_F_STANDBY was enabled during feature
950 # negotiation. Failover primary devices which were hidden (not
951 # hotplugged when requested) before will now be hotplugged by the
952 # virtio-net standby device.
954 # @device-id: QEMU device id of the unplugged device
960 # <- { "event": "FAILOVER_NEGOTIATED",
961 # "data": { "device-id": "net1" },
962 # "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
964 { 'event': 'FAILOVER_NEGOTIATED',
965 'data': {'device-id': 'str'} }
968 # @NETDEV_STREAM_CONNECTED:
970 # Emitted when the netdev stream backend is connected
972 # @netdev-id: QEMU netdev id that is connected
974 # @addr: The destination address
980 # <- { "event": "NETDEV_STREAM_CONNECTED",
981 # "data": { "netdev-id": "netdev0",
982 # "addr": { "port": "47666", "ipv6": true,
983 # "host": "::1", "type": "inet" } },
984 # "timestamp": { "seconds": 1666269863, "microseconds": 311222 } }
986 # <- { "event": "NETDEV_STREAM_CONNECTED",
987 # "data": { "netdev-id": "netdev0",
988 # "addr": { "path": "/tmp/qemu0", "type": "unix" } },
989 # "timestamp": { "seconds": 1666269706, "microseconds": 413651 } }
991 { 'event': 'NETDEV_STREAM_CONNECTED',
992 'data': { 'netdev-id': 'str',
993 'addr': 'SocketAddress' } }
996 # @NETDEV_STREAM_DISCONNECTED:
998 # Emitted when the netdev stream backend is disconnected
1000 # @netdev-id: QEMU netdev id that is disconnected
1006 # <- { "event": "NETDEV_STREAM_DISCONNECTED",
1007 # "data": {"netdev-id": "netdev0"},
1008 # "timestamp": {"seconds": 1663330937, "microseconds": 526695} }
1010 { 'event': 'NETDEV_STREAM_DISCONNECTED',
1011 'data': { 'netdev-id': 'str' } }