KVM - build ubuntu guest, bridge network and iptables port forwarding

Once you install and setup KVM, configure kvm itself and system network bridge interface correctly on your Ubuntu server,
you can now starting to build a guest OS / disk image, run it, and use iptables to forward connections to those new VPSes.

Build guest:

HTTP_PROXY="Proxy_IP:Port" sudo ubuntu-vm-builder kvm hardy \
--dest 'DEST_DIR'\
--hostname 'GUEST_HOSTNAME'\
--arch 'i386'\
--mem '256'\
--rootsize '4096'\
--swapsize '1024'\
--kernel-flavour 'virtual'\
--domain 'bluet.org'\
--mirror 'http://ftp.twaren.net/ubuntu'\
--components 'main,universe,multiverse,restricted'\
--addpkg ssh --addpkg vim --addpkg unattended-upgrades --addpkg acpid\
--name 'Default_User_Name' --user 'Default_User_Account' --pass 'Default_User_Password'\
--mask ''\
--net ''\
--bcast ''\
--gw ''\
--dns ''\
--tmp '/dev/shm/'\
--libvirt qemu:///system ;

Modify that to fit your needs.

Forward "connections to specific port on HostOS" to a specific port on GuestOS (VPS):

Run these commands in HostOS:

$ sudo iptables -t nat -I PREROUTING -p tcp -d HostOS_IP --dport HostOS_Port -j DNAT --to GuestOS_IP:GuestOS_Port
$ sudo iptables -A FORWARD -p tcp -d GuestOS --dport GuestOS_Port -j ACCEPT

For example, if you want to ssh to your VPS, you can pick a spare (not-using by other application) port, and forward "connections to the specified port on HostOS" to the GuestOS's port 22.
Let's say, when HostOS is using IP, GuestOS is using IP, the choosen port on HostOS is 10022, you can do the following commands.

$ sudo iptables -t nat -I PREROUTING -p tcp -d --dport 10022 -j DNAT --to-destination
$ sudo iptables -I FORWARD -p tcp -d --dport 22 -j ACCEPT

Finally, you got a configured VPS, you can start running it and ssh into it.

Start the VPS:
If your GuestOS' hostname is "vps01", you can do this to start running it:
$ virsh start vps01
And then ssh into it:
$ ssh -v -p 10022

Refs: KVM document page on ubuntu.com

Add new comment