This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] how to provide different Xen subnets access to a DomU-instal

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] how to provide different Xen subnets access to a DomU-installed NAS?
From: "snowcrash+xen@xxxxxxxxx" <schneecrash+xen@xxxxxxxxx>
Date: Fri, 2 May 2008 07:46:00 -0700
Delivery-date: Fri, 02 May 2008 07:46:35 -0700
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; bh=Qnta9Uxy/inIHu/YfAj9J+Z0IuX79sQNHc5rQVYIuy0=; b=AiXA3AG4UR8sIdBm6zdgnwZkK9/bfMmTMWSRb5Q/yUuyiqAS9qC1T4G0Bycep3yH++H2E9ytaEQa0RiQz7e77R+2b4bY6Njk6KuayppLpDsBuxZxhkpZWcSGVkm3IgFVyqMJu7XgevzCUK99Fa4SrxXcXPtagsfRDJYbbsyBPPM=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=Z9XvQdTZJyc/OaCLAaDIm9Nw6c8CjKG20mZdtxFRJMT27mj19TFot0PEqc2n8qlqOiwPrHKRy/73glpq8u5FNKXxX4rrycik0DUzxIKZ8NF9lb6q7Oscq3tJdwiaKg4156Q4zKf3BAfzOG5Fc0GxvEie2dUCX8FRvQDscKidZzY=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
I've a Xen Dom0 with 3 vif-bridges defined, one each for LAN, WAN & DMZ.

A DomU router/firewall routes between the 3.  Works great.

After getting advice from the list, I've settled on an apporach to
file-services; I've launched a storage appliance (OpenFiler) in a
DomU.  For initial access, it attaches to the LAN bridge.

I next want to provide access to the NAS 'bus' from both DMZ & LOC
machines.  Routing across all the storage protocols gets messy quickly

I'm thinking that the right apporach is to define another bridge,
solely for the purpose of the NAS traffic, providing private access
*around* the firewall. (Is that, then a 'vlan'?)

If it's viable -- should that bridge be Xen-routed, using static
routes?  If so, at that point I have mixed xen-bridging & -routing ...
should be ok, I think.

There seem to be many ways to achive this; I'm not sure if this
approach is recommended/wise.  Comments?

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-users] how to provide different Xen subnets access to a DomU-installed NAS?, snowcrash+xen@xxxxxxxxx <=