[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] XCP and Amazon EC2-style networking

  • To: Grant McWilliams <grantmasterflash@xxxxxxxxx>
  • From: C V <rayvittal-lists@xxxxxxxxx>
  • Date: Mon, 15 Mar 2010 11:37:33 -0700 (PDT)
  • Cc: xen-users@xxxxxxxxxxxxxxxxxxx
  • Delivery-date: Mon, 15 Mar 2010 11:38:48 -0700
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=yyVGJxHcKspDEzNrkhNVxEbgU9jRn0YSXjrOpcWKobJ3JbOU4q2QzIM001tNO7H3qneAPEL+6Mnev3Zq7cYaQG2JdE51MZ/XrkHAFiyxR3RRX2CmEisalfa3fvZN8HDDPS0aZop4VlWe8t8F86vSiCb+k4NzyOPA9FwwyzeiLhQ=;
  • List-id: Xen user discussion <xen-users.lists.xensource.com>

Yes, and also the ability to specify fine-grained firewall rules on the public address.

From: Grant McWilliams <grantmasterflash@xxxxxxxxx>
To: C V <rayvittal-lists@xxxxxxxxx>
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Sent: Sun, March 14, 2010 4:46:02 PM
Subject: Re: [Xen-users] XCP and Amazon EC2-style networking

On Sun, Mar 14, 2010 at 12:30 PM, C V <rayvittal-lists@xxxxxxxxx> wrote:
On EC2, each instance (Xen DomU) gets an internal IP address (usually 10.x.y.z) and also a public IP address which is NAT'ed to the internal IP address. I am assuming that this NAT happens in Dom0.

In XCP, the DomU VIFs are directly bridged to the physical network -- this would be the internal IP equivalent. I don't see any equivalent way to NAT the public IP address to the internal IP address. With xend-style networking it may have been possible to use network-nat or perhaps network-route
vi /etc/xen/xend-config.sxp
(network-script network-route)
#(network-script network-bridge)
#(network-script network-nat)

Is it possible in XCP?


So really all you want is for your public IP to be routed to your vif and back?

Grant McWilliams

Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.