Re: [Xen-users] To use DOM0 or not to use DOM0

[Simon Hobson <linux@xxxxxxxxxxxxxxxx>]

Fajar A. Nugraha wrote:

> I usually keep dom0 services to minimal. That includes firewalls,
> which I place on domU.
Me too !

From the stability and security point of view, it's best to keep 
stuff on Dom0 to a minimum. If Dom0 goes down or gets compromised 
then that compromises all your other domains - therefore you want to 
limit it's exposure to software bugs and security risks.
And of course, when setting up routers and firewalls, then the 
environment in a DomU is VERY mush easier to work in.
--
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users