WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] advanced networking continued

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] advanced networking continued
From: rob@xxxxxxxxxxxxxxxxxx
Date: Mon, 15 Jan 2007 12:06:23 +0100 (CET)
Delivery-date: Mon, 15 Jan 2007 03:06:17 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
Importance: Normal
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: SquirrelMail/1.4.8
Yesterday i posted a question about multiple nics and xen networking.
I build and create a bridge for every physical interface that i have got,
as mentioned like this in article:

http://www.debian-administration.org/articles/470

script that is being used.

#!/bin/sh
dir=$(dirname "$0")
"$dir/network-bridge" "$@" vifnum=0 netdev=eth0 bridge=xenbr0
"$dir/network-bridge" "$@" vifnum=1 netdev=eth1 bridge=xenbr1
"$dir/network-bridge" "$@" vifnum=2 netdev=eth2 bridge=xenbr2

Now lets say i use the pciback hide option to hide eth1 and eth2 from Dom0.
I put in a line in /etc/modprobe.conf (os is fedora core 6)

pciback hide=(00:09.0)(00:0a.0)

Does xen create a bridge for the hided eth1 and eth2?

Because if i can get this to work i can easily secure Dom0 using iptables.
And i can easily run a firewall on xenbr1 for lets say a internet facing
DomU, which network card i directly attached to the modem, because Dom0
does not see the interface eth1???

Is this a proper design to get that done?

Regards,

Rob


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-users] advanced networking continued, rob <=