[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Giving a domU direct access to a NIC


  • To: "Nemeth, Tamas" <nice@xxxxxxxxxxxxxxx>
  • From: "Antoine Benkemoun" <antoine@xxxxxxxxxxxxx>
  • Date: Sat, 20 Sep 2008 12:44:19 +0200
  • Cc: Xen Users <xen-users@xxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Sat, 20 Sep 2008 03:45:02 -0700
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version :content-type:references:x-google-sender-auth; b=JJAB3rcR40m9lG2J2jdvV/kfPyFuYRgin6/Di6+mi6a0vntGrSUbOWtFr+QJQUAJ3q 0YQmmFSptkrwxFK+pVSRqvZ1BxHrHMlOXNneMB1wWuSCWsyJeZKYKUC64Ipcb0iOy8xE yLSd5dXrq++L/Z2ZTE1+tL7CFmYFt+ndfT50s=
  • List-id: Xen user discussion <xen-users.lists.xensource.com>

Just another question, wouldn't it be possible to do this with ebtables ? For example, if I bridge the snort interface to the regular NIC and then I forward all the packets to this NIC, would i be able to use ebtables or something along these lines to send the packets to the snort interface ?

Thanks for your help,

Antoine

On Fri, Sep 19, 2008 at 3:16 PM, Antoine Benkemoun <antoine@xxxxxxxxxxxxx> wrote:
Thanks very much ! I'll have a look at that



On Fri, Sep 19, 2008 at 11:09 AM, Nemeth, Tamas <nice@xxxxxxxxxxxxxxx> wrote:
2008. 09. 19, péntek keltezéssel 10.38-kor Antoine Benkemoun ezt írta:

> I don't really know how Xen networking works,
http://wiki.xensource.com/xenwiki/XenNetworking
http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html



> but is it possible to give a domU direct access to a NIC ?

It's possible to give PCI devices (including ethernet cards ;) to domUs.
I haven't ever tried this, but you may read:
http://www.novell.com/communities/node/2880/assign-dedicated-network-card-or-pci-device-xen-virtual-machine



> Or at least give it enough access so that it can see packets that are
> not for the domU originally.

I'm afraid not.





--
Antoine Benkemoun
Tel : 03.51.53.57.00
Port : 06.32.88.59.35



--
Antoine Benkemoun
Tel : 03.51.53.57.00
Port : 06.32.88.59.35
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.