[Xen-users] how to provide different Xen subnets access to a Dom

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-users] how to provide different Xen subnets access to a DomU-installed NAS?
From:	"snowcrash+xen@xxxxxxxxx" <schneecrash+xen@xxxxxxxxx>
Date:	Fri, 2 May 2008 07:46:00 -0700
Delivery-date:	Fri, 02 May 2008 07:46:35 -0700
Dkim-signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; bh=Qnta9Uxy/inIHu/YfAj9J+Z0IuX79sQNHc5rQVYIuy0=; b=AiXA3AG4UR8sIdBm6zdgnwZkK9/bfMmTMWSRb5Q/yUuyiqAS9qC1T4G0Bycep3yH++H2E9ytaEQa0RiQz7e77R+2b4bY6Njk6KuayppLpDsBuxZxhkpZWcSGVkm3IgFVyqMJu7XgevzCUK99Fa4SrxXcXPtagsfRDJYbbsyBPPM=
Domainkey-signature:	a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=Z9XvQdTZJyc/OaCLAaDIm9Nw6c8CjKG20mZdtxFRJMT27mj19TFot0PEqc2n8qlqOiwPrHKRy/73glpq8u5FNKXxX4rrycik0DUzxIKZ8NF9lb6q7Oscq3tJdwiaKg4156Q4zKf3BAfzOG5Fc0GxvEie2dUCX8FRvQDscKidZzY=
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

I've a Xen Dom0 with 3 vif-bridges defined, one each for LAN, WAN & DMZ.

A DomU router/firewall routes between the 3.  Works great.

After getting advice from the list, I've settled on an apporach to
file-services; I've launched a storage appliance (OpenFiler) in a
DomU.  For initial access, it attaches to the LAN bridge.

I next want to provide access to the NAS 'bus' from both DMZ & LOC
machines.  Routing across all the storage protocols gets messy quickly
...

I'm thinking that the right apporach is to define another bridge,
solely for the purpose of the NAS traffic, providing private access
*around* the firewall. (Is that, then a 'vlan'?)

If it's viable -- should that bridge be Xen-routed, using static
routes?  If so, at that point I have mixed xen-bridging & -routing ...
should be ok, I think.

There seem to be many ways to achive this; I'm not sure if this
approach is recommended/wise.  Comments?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

WARNING - OLD ARCHIVES

xen-users

[Xen-users] how to provide different Xen subnets access to a DomU-instal