It would be nice if the configuration of DNS and default route was not a mandatory setting.
For an environment where strict access control is required, the option to not configure DNS and/or default route would be great. Having to set them to a fake address is just annoying.
No, I’m looking to set up the device without DNS and a default-route, making it reachable only from the current network. This to prevent any outgoing traffic from the device.
The biggest headache I can see with this is NTP. Clock skew between the client device and KVM will break TLS. I don't know how various browsers handle this, but Chrome doesn't seem to like when a previously valid cert is no longer valid.
Since it’s running with a self-signed cert it seems to work just fine. The clock is currently currently in January 1970 and no issues besides the self-signed warnings in the browsers.