| |
|
 |
|
 |
|
|
|
| |
|
|
xen-users
Re: [Xen-users] dom0 networking
> > 2. Is such a setup has a security weakness that I'm not seeing?
> Don't know about that one
Any dom-u that broadcasts an IP with that configuration "owns" it. As
long as you specify a mac / ip in your config per dom-u that shouldn't
be an issue.
If not, its possible for one dom-u to 'hijack' an IP owned by another.
Really only an issue if untrusted people have root access to the
dom-u's. Its more likely to happen by accident than as some sort of
attack, especially if you're using dhcp.
We do something similar with dom-u's we use for redundant in-line
firewalls and snort appliances, works very well :)
HTH
Tim
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
| |
|
Home