xen-users

[Top] [All Lists]

Re: [Xen-users] domain0 ?

from [Mark Williamson]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	Re: [Xen-users] domain0 ?
From:	Mark Williamson <mark.williamson@xxxxxxxxxxxx>
Date:	Wed, 21 Sep 2005 00:53:03 +0100
Cc:	Paul Reilly <pareilly@xxxxxx>
Delivery-date:	Tue, 20 Sep 2005 23:49:18 +0000
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to:	<Pine.OSF.4.43L0.0509171957110.90852-100000@xxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<Pine.OSF.4.43L0.0509171957110.90852-100000@xxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent:	KMail/1.8

> But I'm wondering about domain0.... Should I treat domain0
> as a slimmed down management domain which I just use to run
> the other domU's or can I use domain0 for some major services
> which the machine is running (web,smtp etc)?

It's more secure to keep dom0 minimal.  Also, for most services, there's no 
need to run them in dom0: they should run just as fast in a domU, with better 
isolation.

> What's best practice? I'd like to minimise the number of IP's I need
> for my XEN box, so ideally would like to use dom0 for serveral
> server functions (in addition to running XEN).

How about configuring Iptables rules to redirect the appropriate ports to 
different domains?  You won't need loads of IP addresses but you'll get the 
proper Xen isolation.

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] Xen IP stack fails handoff to pluto in openswan, John A. Sullivan III [Xen-users] domain0 ?, Paul Reilly Re: [Xen-users] domain0 ?, Mark Williamson <= Message not available Re: [Xen-users] Xen IP stack fails handoff to pluto in openswan, John A. Sullivan III

Previous by Date:	Re: [Xen-users] SMP and Memory Limits, Mark Williamson
Next by Date:	RE: [Xen-users] SMP and Memory Limits, Kevin Babst
Previous by Thread:	[Xen-users] domain0 ?, Paul Reilly
Next by Thread:	Re: [Xen-users] Xen IP stack fails handoff to pluto in openswan, John A. Sullivan III
Indexes:	[Date] [Thread] [Top] [All Lists]