Re: [Xen-users] Re: Network isolation - PCI passthrough question

[dave <dave@xxxxxxxxxxxxxxx>]

let's see if I understand, something like:

domU (eth0) -> (PCI passthru) -> nic0

this domU will be like an appliance firewall, eth0 which is directly 
configured to pci-dev nic0 is effectively the WAN interface of the domU 
firewall.
other domU vms are on the LAN side of firewall, so you need a "virtual LAN"

bridging to lo interface can be problematic.  instead, from dom0, 
configure several 'tap' interfaces (see tunctl), and those can act as 
LAN interface of the firewall domU and the interfaces of all other domU 
vms.  They can all be bridged together
tunctl -t tap0
tunctl -t tap1
...
# then
brctl addbr tap-br0
brctl addif tap-br0 tap0
brctl addif tap-br0 tap1
...
then assign tap0 to firewall domU, tap1 to first domU vm ...

is this what you're trying to accomplish?



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users