[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-users] Should I use bridged or routed networking?

  • To: <xen-users@xxxxxxxxxxxxxxxxxxx>
  • From: "Jamie J. Begin" <begin@xxxxxxxxxxxxxxx>
  • Date: Tue, 20 May 2008 21:57:05 -0400
  • Delivery-date: Tue, 20 May 2008 18:57:38 -0700
  • List-id: Xen user discussion <xen-users.lists.xensource.com>
  • Thread-index: Aci65ffxrHsnpkswTGaDMZD+v0i9gA==

I have a physical server with four interfaces. Dom0 will be running Shorewall to take care of the firewall/routing functions of our network.  A domU will be running Asterisk for VoIP, and a second domU will serve up a basic website.  I also intend to eventually bring up another DomU running SER (a SIP proxy) to assist external VoIP clients who are behind a NAT gateway.  I am planning on using the four physical interfaces as follows:


eth0: Connected to our LAN.


eth1: DMZ.  This will primarily contain a Cisco PIX to provide legacy access to our VPN, which is in the process of being replaced with OpenVPN.  I would also like to bring up the public web server here. I will likely setup a static NAT config in Shorewall for this zone.


eth2: Internal VoIP network. In the office we have a physically separate LAN (separate cabling, switch, etc) which will interconnect the VoIP phones and the (virtualized) Asterisk server.


eth3: Our T1 connection to the Internet.  Our telecom provider is also providing our voice trunking via SIP handoff, so both voice and data will be coming in on this interface.


Once I get my head wrapped around all of this and get a stable config working, I’d also like to swap out the dual-port NIC with a quad-port.  I’d then add in two additional zones for a backup DSL connection and wifi access.


I’m very comfortable with Asterisk and moderately experienced with Shorewall, but still rather new to Xen and am having difficulty visualizing the proper network config to use.  Bridged? Routed? With a handful of servers and switches I’m sure I’d manage much better, but that’s not very efficient. :-) Anyone have any suggestions?  Thanks!

Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.