Re: [Xen-users] Bridge vs. Route configuration?

[Eric Windisch <lists@xxxxxxxxxx>]

> In Xen, by default the domains are configured to use bridge (with
> network-bridge script). But there is network-route, and this option
> also allows us to connect domains.
>
> But I don't see what is the advantage of Route config over Bridge. In
> which case we should use Route method instead?
Bridging is perfectly fine in many cases, but when you have untrusted 
DomU, routing can be preferable.
Routing establishes a healthy level of distrust to your network stack.

- Do trust dom01 to not assign itself IPs assigned to dom02 ?
- Do I want a firewall between dom01 and dom02 ?
- Do I want dom01's web access sent to a transparent proxy, but not 
dom02's web access?
These are questions that can be solved by routing.   Finally, I should 
note that  bridges aren't completely lost in terms of security, ebtables 
is far from useless, but it isn't as flexible as routing.
--
Eric Windisch

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users