|
|
|
|
|
|
|
|
|
|
xen-users
Re: [Xen-users] practical example and explanation of Xen sHype
On 1/16/07, Christian Horn <chorn@xxxxxxxxxxxx> wrote:
Had the same thing in mind when i listened to Ralf Spennebergs pre-
sentation at 23C3 on sHype.
But maybe its a good start when having a framework in mind that has an
overview on all domU of a site and manages their failover/loadbalancin
from a top view.
That is what I wrote in the last part of my mail - this is a possible
scenario, but for this another important piece is lacking, cause it's
not efficient, and tedious, and therefore again a thread to security
to have to bring the policy manually to all xen servers in a
distributed setup with automated load balancing - manual actions
always call for human errors, e.g. forgetting to copy the changed
policy to one important host!
So, currently, sHype must be seen more like experimental, and should
be marked as this in the manual - with a note on the scenario in which
it will be useful one day if the full distributed security framework
is available.
If it would be documented like this, it would eventually even draw
developers who are interested in helping with the missing parts.
Henning
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
|
|