| |
|
 |
|
 |
|
|
|
| |
|
|
xen-users
Re: [Xen-users] Bridge vs. Route configuration?
In Xen, by default the domains are configured to use bridge (with
network-bridge script). But there is network-route, and this option
also allows us to connect domains.
But I don't see what is the advantage of Route config over Bridge. In
which case we should use Route method instead?
Bridging is perfectly fine in many cases, but when you have untrusted
DomU, routing can be preferable.
Routing establishes a healthy level of distrust to your network stack.
- Do trust dom01 to not assign itself IPs assigned to dom02 ?
- Do I want a firewall between dom01 and dom02 ?
- Do I want dom01's web access sent to a transparent proxy, but not
dom02's web access?
These are questions that can be solved by routing. Finally, I should
note that bridges aren't completely lost in terms of security, ebtables
is far from useless, but it isn't as flexible as routing.
--
Eric Windisch
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
| |
|
Home