WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] How to setup my Xen network?

To: xen-users <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] How to setup my Xen network?
From: lists@xxxxxxxxxxxxx
Date: Mon, 20 Oct 2008 14:56:05 +0000 (UTC)
Delivery-date: Mon, 20 Oct 2008 07:56:23 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <31389825.1241224514445458.JavaMail.root@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
----- "Lists" <lists@xxxxxxxxxxxxx> wrote:
> I guess what I am asking for is advice on how to make 3 DomUs
> available to the internet through one physical interface with a
> minimum of risk.  I'd rather only use one public IP but I can have
> access to several more but in different ranges as shown above.
> 
> Any documentation explaining how to do this is welcome.
> 
> Thanks
> --
> eco

Here is what I have come up with but it needs to be testted... anyone want to 
comment on this?

Xen 3.2.1 bridged with 1 physical NIC and multiple NIC Aliases and bridges


          |hardware       |Alias          |Bridge        |DomN  


                       |-> eth0    <-----> eth0   <-----> eth0 dom0
WAN <-----> eth0 <-----|-> eth0:0  <-----> eth0:2 <-----> eth0 dom1
                       |-> eth0:1  <-----> eth0:3 <-----> eth0 dom2


Dom0 - /etc/network/interfaces
------------------------------
auto eth0
iface eth0 inet static
        address 192.168.110.150
        netmask 255.255.255.0
        gateway 192.168.110.2
#       post-up ethtool -K eth0 tx off

auto eth0:0
iface eth0:0 inet static
        address 192.168.61.1
        netmask 255.255.255.0
#       post-up ethtool -K eth0 tx off

auto eth0:1
iface eth0:1 inet static
        address 192.168.62.1
        netmask 255.255.255.0
#       post-up ethtool -K eth0 tx off


Dom0 - /etc/xen/scripts/network-bridge-multiple
-----------------------------------------------
#!/bin/sh
dir=$(dirname "$0")
"$dir/network-bridge" "$@" netdev=eth0 bridge=eth0
"$dir/network-bridge" "$@" netdev=eth0:0 bridge=eth1
"$dir/network-bridge" "$@" netdev=eth0:1 bridge=eth2


Dom0 - /etc/xen/test01.test.com.cfg
-----------------------------------
kernel      = '/boot/vmlinuz-2.6.18-6-xen-686'
ramdisk     = '/boot/initrd.img-2.6.18-6-xen-686'
memory      = '64'
root        = '/dev/sda2 ro'
disk        = [
                  'phy:/dev/vm/test01.test.com-swap,sda1,w',
                  'phy:/dev/vm/test01.test.com-disk,sda2,w',
              ]
name        = 'test01'
vif         = [ 'mac=00:16:3E:EF:76:34, bridge=eth0:0' ]
on_poweroff = 'destroy'
on_reboot   = 'restart'
on_crash    = 'restart'

DomU - /etc/network/interfaces
------------------------------
auto eth0
iface eth0 inet static
        address 192.168.61.10
        netmask 255.255.255.0
        gateway 192.168.61.1
# post-up ethtool -K eth0 tx off

Both DomUs boot and I can ssh from Dom0 to DomU and vice versa.  Sadly I can't 
test from the WAN.

Any thoughts at all? :)
--
eco

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>