Become a Beta Tester

KVM · Platform

Frabs for VirtFusion

On a VirtFusion hypervisor, Frabs reads the VMs through a read-only libvirt connection and watches each VM's interface.

Become a Beta TesterTry the Demo

VirtFusion

Protects
KVM virtual machines
Recognised by
The virtfusion package
Watches
Each VM's tap device
Panel links
Open in VirtFusion

How it works

How Frabs works on VirtFusion

  1. 01

    Install

    One command as root on the server. It reads the setup without changing anything.

  2. 02

    Recognise VirtFusion

    The virtfusion package tells the sensor which platform it is on.

  3. 03

    Find every guest

    A read-only libvirt connection: virsh list and domiflist.

  4. 04

    You confirm

    You review what it will watch. Protection starts within 30 seconds of confirming.

Networking

What it watches, and what it leaves alone

Each VM's tap device

As libvirt reports it for the VM, often vnet<n>

Bridges. The bridges your VMs attach to. Bridges with no VMs are left alone.

How traffic is counted. A Frabs-only nftables table on each guest interface. Your own firewall rules and the host's interfaces are not touched, and nothing changes until a rule or a person acts.

An example plan

PlatformVirtFusion
WatchesEach VM's tap device, …
Leaves aloneBridges with no guests
Changes madeNone until you act

Get started

Install on VirtFusion

On the server, as root

curl -fsSL https://install.frabs.net | sh -s -- --token frb_...
  • Install on each hypervisor, not the VirtFusion control server
  • VM pages link straight to the VM: Open in VirtFusion
  • Read the Install Guide

Questions

Is anything installed inside the VMs?
No. The sensor runs on the server itself, never inside a customer's guest.
Does Frabs change my bridges or firewall?
No. It counts traffic in its own nftables table on each guest interface, and only acts when your rules or your team say so.
What happens if I add a bridge or move guests?
The server's page shows that the layout changed. Run frabs reconnect, review the updated plan and confirm.
What if the sensor stops?
Its network changes are removed and traffic carries on, unless you chose fail-closed.

Also supported

Other platforms

See it with real data

Become a Beta TesterTry the Demo