roles/config-virt/templates/daemon.j2

#!/bin/sh

SHELL="/bin/bash"

NIC=$( route|grep default|awk '{print $NF}' )

NAME="${1}"
OP="${2}"
SUBOP="${3}"
ARGS="${4}"

add_port_fwd_rule() {
    DPORT=$1
    VMIP=$2
    TOPORT=$3

    iptables -t nat -C PREROUTING -p tcp -i $NIC --dport $DPORT -j DNAT --to-destination $VMIP:$TOPORT
    if [ "$?" -ne 0 ]
    then
        iptables -t nat -A PREROUTING -p tcp -i $NIC --dport $DPORT -j DNAT --to-destination $VMIP:$TOPORT
    fi
}

if [ "$OP" = "start" ] || [ "$OP" = "reload" ]
then
    iptables -t nat -F

{% for vm in head_vm_list -%}
{% if vm.forwarded_ports is defined -%}
{% set vm_net = ( virt_nets | selectattr("head_vms", "defined") | first ) %}
{% for port in vm.forwarded_ports -%}
    add_port_fwd_rule {{ port.ext }} "{{ vm_net.ipv4_prefix }}.{{ vm.ipv4_last_octet }}" {{ port.int }}
{% endfor -%}
{% endif -%}
{% endfor -%}

    # Also flush the filter table before rules re-added
    iptables -F
fi