How to permit traffic from KVM guest to KVM host with firewalld, for instance to access HTTP server running on KVM host form guest VMs.
#permit traffic on firewall
firewall-cmd --add-service=http --zone=libvirt
firewall-cmd --add-service=http --zone=libvirt --permanent
#verify
firewall-cmd --list-all-zones
firewall-cmd --add-service=http --zone=libvirt
firewall-cmd --add-service=http --zone=libvirt --permanent
#verify
firewall-cmd --list-all-zones