Re: [Xen-users] Firewall in domU, networking in XEN

["Fajar A. Nugraha" <list@xxxxxxxxx>]

On Mon, May 7, 2012 at 3:09 PM, Sławek Kosowski <slawek.k_xl@xxxxx> wrote:
> I need to clarify the ethernet interface setting.
> I found this link: 
> http://old-list-archives.xen.org/archives/html/xen-users/2006-02/msg00602.html
>
> Since I will have only one NIC at dom0 that I will passthrough to domU1, 
> which interface do I choose for dom0 to be bridged with domU1 ?
>
> I enclose the drawing in the attachment.
> If I make a PCI passthrough for eth device, is it assigned to vif1.0 in domU1 
> ?
> I understand that I make the bridges in domU0 ?

Don't bother with PCI passthru. Seriously. Plus your comments indicate
you have never tried it before.

Think of dom0 like a L2 switch that supports vlan, and set it up as such:
- If you have more than 1 NIC, it's easier if you simply bond them
together for increased availability and throughput. In your case it
doesn't matter since you only have 1 NIC.
- create VLANs on the NIC, if possible. Of course your switch (or the
providers switch) must support trunk + VLAN configuration as well.
- create bridges on dom0 for each VLAN. If you don't use VLAN, then
you only need to have one bridge (for the physical NIC). Fori private
(i.e. dom0 <-> domU or domU <-> domU) networks, create bridges using
dummy interface.
- assign IP addresses on dom0 bridges as needed. If a bridge is used
only by a domU, then you don't need to assign IP on dom0 side.

-- 
Fajar

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users