This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] Re: Xen - bonding

To: "Frank Pikelner" <Frank.Pikelner@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: [Xen-users] Re: Xen - bonding
From: Ferenc Wagner <wferi@xxxxxxx>
Date: Tue, 25 Nov 2008 20:54:22 +0100
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 25 Nov 2008 11:55:06 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <B86F8BCEEED5184CA225E0CC10FF61163217C6@xxxxxxxxxxxxxxxxxx> (Frank Pikelner's message of "Tue, 25 Nov 2008 11:48:54 -0500")
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <B86F8BCEEED5184CA225E0CC10FF61163217C6@xxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
Hi Frank,

Please don't move the discussion off the mailing list.  Thanks.

"Frank Pikelner" <Frank.Pikelner@xxxxxxxxxxxxxxxxxxxxxxxxxx> writes:

> We would like to configure Xen so that the two physical Dom0
> interfaces are bonded (for failover).

Massimiliano De Ruosi gave a setup for this, on which I commented.
The point is that you shouldn't assign the IP to the bond, but rather
to the bridge, if the dom0 and the domUs are on the same VLAN.  This
is (in my opinion) best achieved by taking the bridge configuration
out of the hands of Xen by using the network-dummy script, and setting
up the bridges by the usual configuration facilities of your OS.

On the other hand, it may not be the best setup security-wise.  Most
people prefer to tightly control access to their dom0s, and try to
insulate them from the domU traffic they forward.

> Is what we want to accomplish possible?

If I understand you correctly, this is exactly that some of us do.

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-users] Re: Xen - bonding, Ferenc Wagner <=