This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] tricky virtual network with Xen

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] tricky virtual network with Xen
From: xamiw@xxxxxxxx
Date: Thu, 1 Dec 2005 02:45:27 +0100 (CET)
Delivery-date: Thu, 01 Dec 2005 01:45:24 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hello all!

I have a big question to the Xen-gurus out there. I want to establish a tricky 
virtual network with Xen cause I have to migrate my old network to a new one. A 
suggestion is to buy a big machine which should work alone without any other 
machines. Beneath is a draft of the desired network. It's simmilar to the 
existing network.

Domain2 and Domain5 each have privileged access to one networkcard which is 
provided by domian0 (intra-/internet). So, there is no need for me to have a 
network attached at domain0. And further I don't want server processes on 
domain0. Domain0 should only control the others. It should not be possible for 
the Domain1 to 8 to "see" Domain0.

So, what's the question? My problem is the virtual networking with Xen. I'm 
still not good in configuring Xen so maybe someone can help me with a little 
example. I don't need a whole configuration-howto for the drafted network but 
some hints in the way of virtual networking in Xen.

Thank you!

The virtual network should be like this:
+--Domain4              Internet--+     |Domain0|
|                                 |     +-------+
|                                 |
+--Domain3--+         +--Domain2--+
            |         |
            |         |
            +--+   +--+
               |   |
               |   |
            +--+   +--+
            |         |
            |         |
+--Domain5--+         +--Domain6--+
|                                 |
|                                 |
+--Intranet                       +--Domain7


        Domain1 is the networkbackbone.

        A.B.C.D/E (provided by ISP)
        Domain2 is a firewall, a IDS and a router under NetBSD. The IP-address. 
A.B.C.D/E use one of the physical networkcards.

        Domain3 is a firewall, a IDS and a router under Linux.

        Domain4 is a DMZ server (www, ftp and so on).

        Domain5 is a firewall, IDS and a router under NetBSD. The IP-address use one of the physical networkcards.

        Domain6 is a firewall, a IDS and a router under Linux.

        Domain7 is an internal server.

        Domain8 is an internal server.

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>