[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-users] Xen, bonding and firewall duties?


  • To: Xen users <xen-users@xxxxxxxxxxxxxxxxxxx>
  • From: Thomas Harold <tgh@xxxxxxxxxxxx>
  • Date: Fri, 17 Nov 2006 12:12:33 -0500
  • Delivery-date: Fri, 17 Nov 2006 09:13:09 -0800
  • List-id: Xen user discussion <xen-users.lists.xensource.com>

I have (5) NICs in a machine (eth0 to eth4). I want to run a firewall in a DomU (not in Dom0). We want to bond eth0/eth1/eth2 into bond0 and eth3/eth4 into bond1.

Bond0 - LAN
Bond1 - Internet

What is the path of least resistance? Should we do the bonding in Dom0, and pass a pair of bridged VIFs to the DomU firewall? Or should we pass eth3 and eth4 to the DomU firewall domain as PCI front/back-end devices?

There will be other DomUs running that will only be talking to the Bond0 bridge and the DomU firewall will be forwarding ports to those DomUs.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.