RE: [Xen-users] Bridge Hopping

["Jonathan Tripathy" <jonnyt@xxxxxxxxxxx>]

 

---

From: Jeff Sturm [mailto:jeff.sturm@xxxxxxxxxx]
Sent: Thu 15/07/2010 01:10
To: Jonathan Tripathy; Xen-users@xxxxxxxxxxxxxxxxxxx
Subject: RE: [Xen-users] Bridge Hopping

> -----Original Message-----
> From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx [mailto:xen-users-
> bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Jonathan Tripathy
> Sent: Wednesday, July 14, 2010 5:22 PM
> To: Xen-users@xxxxxxxxxxxxxxxxxxx
> Subject: [Xen-users] Bridge Hopping
>
> Hi Everyone,
>
> My Xen host has 3 bridge. 1 bridge has an ip, the other 2 do not. Am I
> correct in saying that since the 2 bridges don't have an IP address,
> DomUs which are connected to that bridge cannot "hop" from one bridge
to
> the other? It is important that traffic leaving the bridge (not
destined
> for another DomU on the same bridge) goes through the firewall DomU.

If any bridge device is connected to a physical interface (e.g. eth0),
packets could also traverse out that interface into another bridge or
switch on your network.

It's helpful for me to think of Linux bridge devices as virtual
switches, and diagram them exactly the same way.  Each interface
(virtual or physical) plumbed into the bridge device functions like a
switch port.

-Jeff

---------------------------------------------------------------------------------------------------------------

Thanks for your reply.

I understand what you are saying, however my bridges have no virtual and physical NICs which connect them to each other. My question was whether the Dom0 could "forward" packets from one bridge to the other (This is what I wish to prevent). The 2 bridges that don't have an ip address assigned have untrusted clients connected to them

Thanks

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users