| |
|
 |
|
 |
|
|
|
| |
|
|
xen-devel
Re: [Xen-devel] static ip for hvm's
On Mon, Nov 13, 2006 at 12:14:09PM -0700, Liang Yang wrote:
> What is the advantage of using xen router over xen bridge?
Routing is a lot simpler, compare the lengths of the setup scripts...
311 network-bridge
67 vif-bridge
vs
19 network-route
56 vif-route
When routing the linux kernel of dom0 makes the routing decisions
using the routing table we all know and love.
If you set route filtering
echo 1 > /proc/sys/net/ipv4/conf/INTERFACE/rp_filter
then it is easy to make sure that the domUs can't steal any IP
addresses which don't belong to them, nor spoof any IP traffic. No
iptables magic required.
Also every time I take a bridge down it seems to crash the computer!
I guess I'm just allergic to bridging/switching in general having had
to debug some horrible networking problems in the past all caused by
misconfigured or faulty switches ;-)
YMMV of course!
> Then how about using Xen NAT over Xen router and bridge? Could you
> shed some lights here?
I haven't tried Xen NAT. If I was going to do it then I'd do it using
iptables/shorewall in domU.
--
Nick Craig-Wood <nick@xxxxxxxxxxxxxx> -- http://www.craig-wood.com/nick
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
|
|
|
| |
|
Home