PfSense through HVM on Arch. Laptop with single WiFi nic. Can't see network

[bayes]

Hi,

I'm running Arch Linux on a Lenovo Thinkpad X1 Carbon. It has fairly standard configuration, and happily connects to the Internet over the built-in WiFi.

I'm attempting to run PfSense using HVM. The intent is to configure things so that only PfSense can connect to the outside world, and then various other VMs will connect to PfSense for any traffic. That way, the firewall can control all inbound and outbound traffic for different VM, projects, etc. (I can then setup internal routing between VMs, if desired, a DMZ, etc.)

There's an awesome diagram of this here. NOT my design, but from a blog on security: lhttps://www.lucidchart.com/publicSegments/view/424dcf0f-ee22-4b4a-ae7d-e10a2f6ee414/image.jpeg

My problem is that when spinning up a PfSense VM using HVM (virtual machine manager), PfSense doesn't see any bridge or network. It has no connectivity to anything, either internal or external. I've tried configuring different bridge options using both brctl and virsh, but can't seem to figure out the correct configuration.

Has anyone attempted anything similar. Any suggestions for configuration on how to get this working?