Re: [Xen-users] Ideal(istic) Xen firewall design

[Nicholas Lee <emptysands@xxxxxxxxx>]

On 8/12/05, Marcus Brown <marcusbrutus@xxxxxxxxxxxxxxxx> wrote:
> 
> I understand from various postings that I need to manually create the
> extra bridges before bringing up the Firewall domain.
> I guess I could do that in a number of ways,
> but is there a 'Xen approved' method?

I'm not doing the firewall with Xen thing yet, but this is what I've
done for both Xen and UML for my 'virutal internal' networks:

/etc/network/interfaces
auto internal-br
iface internal-br inet static
        address 10.1.0.254
        netmask 255.255.0.0
        network 10.1.0.0
        broadcast 10.1.255.255
        bridge_ports eth1
        bridge_fd 0
        bridge_hello 1
        bridge_stp off
        up route add -net 192.168.1.0/24 gw  10.1.0.1
        down route del -net 192.168.1.0/24 gw  10.1.0.1

Note, in your setup you might use dummy0/1 instead of eth1 in the
above.  I leave the default xen-br to xen itself to configure.

I used dummy interfaces succesfully with UML, I'm not sure how well
they would work with Xen.  Single processor Xen seems to have
performance issues with networking between virtual domUs on the same
host.

-- 
Nicholas Lee
http://stateless.geek.nz
gpg 8072 4F86 EDCD 4FC1 18EF  5BDD 07B0 9597 6D58 D70C

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users