Re: [Xen-devel] static ip for hvm's

[Nick Craig-Wood <nick@xxxxxxxxxxxxxx>]

On Mon, Nov 13, 2006 at 12:14:09PM -0700, Liang Yang wrote:
> What is the advantage of using xen router over xen bridge?

Routing is a lot simpler, compare the lengths of the setup scripts...

  311 network-bridge
   67 vif-bridge

vs

   19 network-route
   56 vif-route

When routing the linux kernel of dom0 makes the routing decisions
using the routing table we all know and love.

If you set route filtering

  echo 1 > /proc/sys/net/ipv4/conf/INTERFACE/rp_filter

then it is easy to make sure that the domUs can't steal any IP
addresses which don't belong to them, nor spoof any IP traffic.  No
iptables magic required.

Also every time I take a bridge down it seems to crash the computer!

I guess I'm just allergic to bridging/switching in general having had
to debug some horrible networking problems in the past all caused by
misconfigured or faulty switches ;-)

YMMV of course!

> Then how about using Xen NAT over Xen router and bridge? Could you
> shed some lights here?

I haven't tried Xen NAT.  If I was going to do it then I'd do it using
iptables/shorewall in domU.

-- 
Nick Craig-Wood <nick@xxxxxxxxxxxxxx> -- http://www.craig-wood.com/nick

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel