WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] Multiple IP addresses?

To: "Tvrtko A. Uršulin" <tvrtko@xxxxxxxxxxxx>
Subject: Re: [Xen-devel] Multiple IP addresses?
From: Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>
Date: Thu, 19 Feb 2004 12:56:14 +0000
Cc: xen-devel@xxxxxxxxxxxxxxxxxxxxx, Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>, Ian.Pratt@xxxxxxxxxxxx
Delivery-date: Thu, 19 Feb 2004 13:01:33 +0000
Envelope-to: steven.hand@xxxxxxxxxxxx
In-reply-to: Your message of "Thu, 19 Feb 2004 13:51:07 +0100." <200402191351.07555.tvrtko@xxxxxxxxxxxx>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=xen-devel>
List-help: <mailto:xen-devel-request@lists.sourceforge.net?subject=help>
List-id: List for Xen developers <xen-devel.lists.sourceforge.net>
List-post: <mailto:xen-devel@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=unsubscribe>
Sender: xen-devel-admin@xxxxxxxxxxxxxxxxxxxxx
> On Thursday 19 February 2004 13:23, Ian Pratt wrote:
> > > Is it possible or the guest domain is limited to one IP address per
> > > physical interface?
> >
> > Certainly. By default guests get *no* IP addresses -- you have to
> > assign them. This is done by "vfr_ipaddr" during domain creation,
> > or you can add/delete addresses latter using the xc_dom_control.
> 
> How is this related to network configuration inside guest domain (ifconfig)?
> Guest can only setup an interface with address that is 'granted' to it?

Guests can configure whatever they like using ifconfig, it just
won't do them any good : They won't be able to receive or even
send any packets on an address unless Xen has been told to
associate the address with the domain's VIF (virtual interface).

To paraphrase a common saying uttered by nightclub doormen: 
"if your name's not on the list, you don't go on the wire." ;-)

Hence, Xen provides secure isolation of domain's IP addresses.
The next version of Xen will also provide L4 port-space
isolation, enabling two or more domain to share a single IP via
something akin to RSIP.


Ian


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel

<Prev in Thread] Current Thread [Next in Thread>