| |
|
 |
|
 |
|
|
|
| |
|
|
xen-devel
Re: [Xen-devel] Xend port
Rich Persaud wrote:
Questions:
1) xend web interface appears on port 8080 (non SSL). Is the
xend-config.sxp parameter not honored?
I'm not sure. I'm reasonably sure that even if you could support
changing the port, changing it to 443 would not automatically make it
use SSL.
2) Does Twisted natively support SSL? I found conflicting statements
in my brief research.
I'm not sure about "native" but I'm quite sure you can use SSL with Twisted.
3) What is listening on ports 8000 and 8001?
Xend listens on 8000 (provides a web interface). 8001 is used by Xend
for events.
4) Related subject, how is xfrd (port 8002) secured against malicious
domain transfers?
It's not. This is one of the reasons why VM-Tools takes such a
different approach to domain migration.
All of the tools in VM-Tools are small and single purposed. One of
these tools (vm-create) will have the ability to read a saved image from
standard input. Another tool (vm-save) will be able to save an image to
standard output.
Migration is simply a matter of piping vm-save to an instance of
vm-create executed via ssh.
The transport is actually transparent to the migration process. You
could just as easily use rexec, or write a simple remote shell that did
IP-level filtering instead of authentication.
This approach gives you a wide variety of choices in terms of signing,
sealing, and authentication mechanisms. Since ssh uses pam, you
instantly are tied into most existing single sign-on environments
(through pam_krb5, pam_winbind, etc.). While using ssh as the transport
is debatable, I believe tying into pam is inevitable for any migration
implementation.
Of course, VM-Tools is still a work in progress. Someone is currently
working on migration support. We're hoping to have it available by the
end of the month.
Regards,
Rich
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel
|
|
|
| |
|
Home