xen-users

[Top] [All Lists]

RE: [Xen-users] layer2

from [James Harper]

[Permanent Link][Original]

To:	"Shaun R." <mailinglists@xxxxxxxxxxxxxxxx>, <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject:	RE: [Xen-users] layer2
From:	"James Harper" <james.harper@xxxxxxxxxxxxxxxx>
Date:	Sun, 9 Nov 2008 10:55:25 +1100
Cc:
Delivery-date:	Sat, 08 Nov 2008 15:56:07 -0800
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to:	<gf5092$duh$1@xxxxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<gf5092$duh$1@xxxxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index:	AclB6S4S+i/nR29iSSWrBcOPrNlJEwAFBSGw
Thread-topic:	[Xen-users] layer2

> 
> Back with UML you needed to use ebtables to filter traffic on each
servers
> TAP interface so that one domain could not sniff another domains
traffic.
> This doesnt look to need to be done on Xen?  Whats difference, looks
like
> the same setup, TAP interfaces connected to a bridge.
> 

A bridge acts like a switch, so unless someone is doing ARP spoofing or
something, a DomU should only get packets with their own MAC address as
the destination (and Multicast and Broadcast packets of course).

You could add ebtables rules to make sure it can't happen at all, but as
a general rule it shouldn't be necessary.

James

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] layer2, Shaun R. RE: [Xen-users] layer2, James Harper <=

Previous by Date:	RE: [Xen-users] Another GPLPV pre-release 0.9.11-pre20, James Harper
Next by Date:	[Xen-users] Re: xm save fails, Rainer Sokoll
Previous by Thread:	[Xen-users] layer2, Shaun R.
Next by Thread:	[Xen-users] Re: xm save fails, Rainer Sokoll
Indexes:	[Date] [Thread] [Top] [All Lists]