[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] DomUs hidden behind Dom0 in the network?

  • To: xen-users@xxxxxxxxxxxxx
  • From: Niels Dettenbach <nd@xxxxxxxxxxxx>
  • Date: Tue, 21 Aug 2012 14:35:56 +0200
  • Delivery-date: Tue, 21 Aug 2012 12:37:46 +0000
  • List-id: Xen user discussion <xen-users.lists.xen.org>

Am Dienstag, 21. August 2012, 13:17:43 schrieb Roger Pau Monne:
> If you are familiar with routers you can try OpenWrt, it has a very good
> build system that can generate Xen PV images directly, so you just need
> to create the image and use it directly or dd it to a hard drive
> partition or lvm lv. Then use this guest as you would use a normal
> router/firewall and make all your DomUs use this other DomU as gateway,
> proxy or whatever you need.

This sound's a bit like opverkill.

Just to make shure what i' had mean:

In xend-config.sxp:

(network-script network-nat)
(vif-script     vif-nat)

(instead of i.e. bridging or normal routing scripts - never tried xens NAT 
scrip's but i assume they do that what they are called ;).

Or do it similiar by hand with:

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j 
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT

where eth0 is the "outgoing" network interface to LAN of the Dom0.


 Niels Dettenbach
 Syndicat IT & Internet
 PGP: https://syndicat.com/pub_key.asc

Attachment: signature.asc
Description: This is a digitally signed message part.

Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.