This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] To use DOM0 or not to use DOM0

Fajar A. Nugraha wrote:

I usually keep dom0 services to minimal. That includes firewalls,
which I place on domU.

Me too !

From the stability and security point of view, it's best to keep stuff on Dom0 to a minimum. If Dom0 goes down or gets compromised then that compromises all your other domains - therefore you want to limit it's exposure to software bugs and security risks.

And of course, when setting up routers and firewalls, then the environment in a DomU is VERY mush easier to work in.

Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>