Iptables, et al best practices for protecting KVM host sharing "hostdev" (ixgbe-vf) interfaces with guests

Hi, I'm a developer and I use VM's for testing patches before submitting them (for various linux-* projects, as well as downstream things like OpenWrt, EPEL, etc). I have a trunked 10Gb/s Ethernet connection coming into my KVM servers (all of which are Supermicro x86_servers running CentOS 8) t

another upgrade another vm issue

Greetings, so I've upgraded my server and yet again, one of my vm lost a functionally. there is no usable sound card. xml: https://dpaste.com/CVR5M75VH in vm: https://snipboard.io/aZ7Dcf.jpg outputs: utils_server /home/igor # qemu-system-x86_64 --version QEMU emulator version 6.0.0 Copyright (c)