WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] Xen, bonding and firewall duties?

To: Xen users <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-users] Xen, bonding and firewall duties?
From: Thomas Harold <tgh@xxxxxxxxxxxx>
Date: Fri, 17 Nov 2006 12:12:33 -0500
Delivery-date: Fri, 17 Nov 2006 09:13:09 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Thunderbird 1.5.0.8 (Windows/20061025)
I have (5) NICs in a machine (eth0 to eth4). I want to run a firewall in a DomU (not in Dom0). We want to bond eth0/eth1/eth2 into bond0 and eth3/eth4 into bond1.

Bond0 - LAN
Bond1 - Internet

What is the path of least resistance? Should we do the bonding in Dom0, and pass a pair of bridged VIFs to the DomU firewall? Or should we pass eth3 and eth4 to the DomU firewall domain as PCI front/back-end devices?

There will be other DomUs running that will only be talking to the Bond0 bridge and the DomU firewall will be forwarding ports to those DomUs.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-users] Xen, bonding and firewall duties?, Thomas Harold <=