WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] XCP Xen Cloud Control System ver 0.3 released!

To: vburke@xxxxxxxx
Subject: Re: [Xen-users] XCP Xen Cloud Control System ver 0.3 released!
From: "Matthew Law" <matt@xxxxxxxxxxxxxxxxxx>
Date: Tue, 25 May 2010 09:49:45 +0100
Cc: xen-users@xxxxxxxxxxxxxxxxxxx, Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
Delivery-date: Tue, 25 May 2010 01:51:07 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
Importance: Normal
In-reply-to: <1126208382-1274738991-cardhu_decombobulator_blackberry.rim.net-829565113- @bda2190.bisx.prod.on.blackberry>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <4BFAC419.9020507@xxxxxxxx> <4BFADA4B.5060705@xxxxxxxxxxx> <4BFADF2B.70205@xxxxxxxx><4BFAEC50.7070103@xxxxxxxxxxx> <1126208382-1274738991-cardhu_decombobulator_blackberry.rim.net-829565113-@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Reply-to: matt@xxxxxxxxxxxxxxxxxx
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: SquirrelMail/1.4.19
Hi Verne,

a fine job!

Do you assign domU addresses from a DHCP server and if so how do you stop
a rogue VM from running it's own DHCP server and answering DHCP requests
from other domUs as they start up?

The default config for XCP does let a domU spoof IP addresses.  I asked
some questions on the openvswitch list recently and I get the impression
that with a separate flow controller box you could do some quite
fine-grained control of network properties even through migration.

What plans do you have for the multi-tenancy side of things? - if you need
any help with database development or the web frontend I would be more
than willing to help out (thats my background).


Cheers,

Matt

On Mon, May 24, 2010 11:09 pm, Vern Burke wrote:
> Jonathan:
>    I don't think there's much to do about preventing someone breaking out
> of a DomU. As I've said before, that would have to be a severe fubar of
> the hypervisor and it's not likely.
>
> Protecting the Dom0 is really nothing more than the standard best
> practices for any Internet connected server.
>
> If you're really concerned about packet sniffing you could always use a
> private vswitch and use a Vyatta virtual router and VPN out to wherever
> you're going.
>
> Vern
> Sent from my BlackBerry® wireless device from U.S. Cellular



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users