Under KVM the guest has a bridge adapter that you can set rules for on the host OS. So, you can mark, log and all that other fun stuff. Like route all DNS quer

Under KVM the guest has a bridge adapter that you can set rules for on the host OS. So, you can mark, log and all that other fun stuff. Like route all DNS queries from guest to logging-cache DNS running on Host, block ports and full control of egress