Re: [Xen-users] Live Migration Config

[Matthew Alton <simplicissimus@xxxxxxxxx>]

This is not good.  I'm going to have a devil of a time selling
this into enterprises of any size.  Are there any plans to provide
filtering rules, authentication, authorization facilities in the
works?  Any bolt-ons? We're looking at a serious show-stopper in
organizations large enough to have an information protection
department, or even security-minded clueful personnel.  As long as
I can fire up the Xen Live CD on my laptop and shoot domU missiles at a
production Xen instance and have them happily migrate we're at a
standstill.  The security people will demand, at a minimum, that
we do not run xfrd on the production node.  There goes a monster
selling point and my entire position against VM-Ware.

I am a professional C/Unix coder.  Can I help provide this functionality?  It seems fairly trivial.

On 10/27/05, Mark Williamson < mark.williamson@xxxxxxxxxxxx> wrote:

> How does one configure the live migration facility? Is there a
> configuration file to allow a foreign dom0 to migrate a domU to the local
> dom0? Or can any dom0 migrate a domU to any other dom0?

It's pretty much free for all as far as dom0s are concerned ;-)  Basically if
one dom0 can reach another over a network, it can migrate stuff there!  Right
now, it's more or less expected that an organisation's dom0s are isolated on
a vlan (or separate ethernet).

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users