Xen users - Sep 2009 - Xen : How to configure a Proxy as DomU ?

Hi all,

after having tried (and spent some night) to configure Xen and proxy as DomU
.. i am going to aks you to help me to resolve it.

i need to create a DomU virtual server which is the "proxy server" and
is
allowed to provide and redirect the web requests to other two DomU (web1 and
web2) as following :

Dom0 -> debian lenny with xen amd64
DomU -> proxy
DomU -> web1
DomU -> web2

actually , i tried many configuration but without result .. seems that proxy
receive the request from the web but it is not able to redirect to the web
server web1 and web2
i am a newbye on xen .. so i didnt add any "route" or customization to
Dom0
and DomU side .. maybe it could be the problem .. so i ask you to help me.

here is the configuration :

Dom0 :

cat /etc/network/interfaces
auto lo
iface lo inet loopback

# -- public
auto xenbr0
iface xenbr0 inet static
        address xxx.xxx.85.136
        netmask 255.255.255.240
        network xxx.xxx.85.128
        broadcast xxx.xxx.85.143
        gateway xxx.xxx.85.129
        bridge_ports eth0
        bridge_stp off
        bridge_maxwait 0
        dns-nameservers xxx.xx.56.5
        dns-search xxx.com

# -- private
auto xenbr1
iface xenbr1 inet static
        address xxx.xxx.200.136
        netmask 255.255.255.0
        network xxx.xxx.200.0
        broadcast xxx.xxx.200.255
        gateway xxx.xxx.85.129
        bridge_ports eth1
        bridge_stp off
        bridge_maxwait 0
        dns-nameservers xxx.xxx.56.5
        dns-search xxx.com


i didnt make any changes on /etc/xen/xend_config.xsd becuase i prefer to
make all configuration in /etc/network/interface (i had some problem with
debian lenny and xen during the network configuration so i choosed to make
bridge in the interface file on Dom0

after having done this configuration .. all domU are able to receive
connection and to go trhought internet without problem . .but now the proxy
seems doesn work properly

is there some configuration that i have to add ?
have i to manage "route" in Dom0 and DomU ?
i have seen that most of you setted to value 1 some files in
/proc/sys/net/ipv4/ . .could you help me to understand ?

many thanks to everyone want help me
cheers

J


_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Mirco Santori wrote:
>i need to create a DomU virtual server which is the "proxy server"
>and is allowed to provide and redirect the web requests to other two 
>DomU (web1 and web2) as following :
>
>Dom0 -> debian lenny with xen amd64
>DomU -> proxy
>DomU -> web1
>DomU -> web2
How would you configure it if your setup was :
physical box 1 -> proxy
physical box 2 -> web1
physical box 2 -> web2

Answer that and you''ve answered how to do it under Xen.

Convert "real" network to Xen :
physical box -> Xen DomU
Network switch -> Dom0 bridge

-- 
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

hello Simon, thank you for answering ,..
sorry but i didnt understand you answer ..

i configured :

Dom0 as physical server
Domu (proy) as virtual machine
Domu (web1) as virtual machine
Domu (web2) as virtual machine

please , could you explain better how i can configure it ?

many tanks Simon

Mirco

2009/9/22 Simon Hobson <linux@thehobsons.co.uk>
> Mirco Santori wrote:
>
>  i need to create a DomU virtual server which is the "proxy
server" and is
>> allowed to provide and redirect the web requests to other two DomU
(web1 and
>> web2) as following :
>>
>> Dom0 -> debian lenny with xen amd64
>> DomU -> proxy
>> DomU -> web1
>> DomU -> web2
>>
>
> How would you configure it if your setup was :
> physical box 1 -> proxy
> physical box 2 -> web1
> physical box 2 -> web2
>
> Answer that and you''ve answered how to do it under Xen.
>
> Convert "real" network to Xen :
> physical box -> Xen DomU
> Network switch -> Dom0 bridge
>
> --
> Simon Hobson
>
> Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
> author Gladys Hobson. Novels - poetry - short stories - ideal as
> Christmas stocking fillers. Some available as e-books.
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@lists.xensource.com
> http://lists.xensource.com/xen-users
>

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Mirco Santori wrote:
>
>sorry but i didnt understand you answer ..
OK, I''ll try and make it clearer.

As I understand it, you do not have the proxy or web servers running 
- your question sounds like "how do I set up these services".

Apart from the basics of getting a VM running, your problem is NOT a 
Xen one. The setup for each of those application servers is no 
different under Xen than if you had three separate machines and a 
network switch.

For help in configuring the web servers, you need to look at the docs 
for the web server you are using (I assume Apache) - and if you can''t 
get it working after reading the docs then use the Apache specific 
support forums. Similarly, for help getting the proxy working (I 
assume Squid) you will need to see the Squid documentation, and if 
that doesn''t help then use the Squid specific help forums.

As far as Xen is concerned, you start up three guests (DomUs), 
connect them to a network bridge, and the guests will work the same 
as three separate physical machines connected to a physical network 
switch.

If you have specific Xen related problems (such as "I''ve created 
three guests, they can ''see'' the outside world but
can''t ''see'' each
other", or "I can''t create a working guest") then we can
help here.
Assuming you can get the guests running, and their networking set up, 
then for help configuring services such as web servers and proxy 
servers - this is not the right (best) place to ask.

-- 
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

i think to have made a wrong  question.

- I installed Dom0 with debian lenny and xen
- i configured network with the bridge method (xenbr0 - xenbr1)
- installed and configured apache with proxy module
- installed and configured two web servers with apache / php5 / mysql

all servers are connected to the internet and intranet (which allow them to
work togheter in a private netork)

i dont need any help by you about proxy - web server and other stuff .. but
actually i need help to configure the Dom0 in order to allow the proxy to
work fine. I guess .. i missing some configuration on Dom0 with the command
"route" .. seems that there is a problem with the proxy which is not
able to
forward the request by using xenbr0 (which is the eth0 on Dom0)

May i ask you (i am sure you got more experience that me in xen) if should i
make some configuration on routing table in Dom0 and to alllow the guest
(DomU) to share the internet traffic in incoming and outgoing ?

thank you so much Simon

2009/9/22 Simon Hobson <linux@thehobsons.co.uk>
> Mirco Santori wrote:
>
>>
>> sorry but i didnt understand you answer ..
>>
>
> OK, I''ll try and make it clearer.
>
> As I understand it, you do not have the proxy or web servers running - your
> question sounds like "how do I set up these services".
>
> Apart from the basics of getting a VM running, your problem is NOT a Xen
> one. The setup for each of those application servers is no different under
> Xen than if you had three separate machines and a network switch.
>
> For help in configuring the web servers, you need to look at the docs for
> the web server you are using (I assume Apache) - and if you can''t
get it
> working after reading the docs then use the Apache specific support forums.
> Similarly, for help getting the proxy working (I assume Squid) you will
need
> to see the Squid documentation, and if that doesn''t help then use
the Squid
> specific help forums.
>
> As far as Xen is concerned, you start up three guests (DomUs), connect them
> to a network bridge, and the guests will work the same as three separate
> physical machines connected to a physical network switch.
>
> If you have specific Xen related problems (such as "I''ve
created three
> guests, they can ''see'' the outside world but
can''t ''see'' each other", or "I
> can''t create a working guest") then we can help here.
Assuming you can get
> the guests running, and their networking set up, then for help configuring
> services such as web servers and proxy servers - this is not the right
> (best) place to ask.
>
>
> --
> Simon Hobson
>
> Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
> author Gladys Hobson. Novels - poetry - short stories - ideal as
> Christmas stocking fillers. Some available as e-books.
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@lists.xensource.com
> http://lists.xensource.com/xen-users
>

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

On Tue, Sep 22, 2009 at 6:00 AM, Mirco Santori
<mirco.santori@gmail.com>wrote:
> i think to have made a wrong  question.
>
> - I installed Dom0 with debian lenny and xen
> - i configured network with the bridge method (xenbr0 - xenbr1)
> - installed and configured apache with proxy module
> - installed and configured two web servers with apache / php5 / mysql
>
> all servers are connected to the internet and intranet (which allow them to
> work togheter in a private netork)
>
> i dont need any help by you about proxy - web server and other stuff .. but
> actually i need help to configure the Dom0 in order to allow the proxy to
> work fine. I guess .. i missing some configuration on Dom0 with the command
> "route" .. seems that there is a problem with the proxy which is
not able to
> forward the request by using xenbr0 (which is the eth0 on Dom0)
>
> thank you so much Simon
>
>
I''m going to assume a few things here

   1. All VMs can talk to each other
   2. All VMs are connected to the xenbr0 network
   3. The Dom0 can access the real network

If these are true then I need something from you. Can you give me the output
of

brctl show

Depending on your version of Xen the network is set up different ways. What
we want is for the physical ethernet device to be attached to the xenbr0 if
you want the VMs to communicate with the real network as if they were real
Servers. You may find that you have two bridges - eth0 (which peth0 is a
member) and xenbr0 (which vif1.0 and vif2.0 are members). If this is the
case then traffic from the eth0 bridge will not traverse thin air and end up
on xenbr0. You might need to add peth0 to xenbr0.

Grant McWilliams


_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Simon .. here is the output :

svrlnx05:/# brctl show
bridge name    bridge id        STP enabled    interfaces
xenbr0        8000.00238b174296    no        eth0
                            vif1.0
xenbr1        8000.00238b174297    no        eth1
                            vif1.1


   1. All VMs can talk to each other -> yes
   2. All VMs are connected to the xenbr0 network -> yes
   3. The Dom0 can access the real network -> yes

actually .. i cannot realize what happening ..



2009/9/22 Grant McWilliams <grantmasterflash@gmail.com>
> On Tue, Sep 22, 2009 at 6:00 AM, Mirco Santori
<mirco.santori@gmail.com>wrote:
>
>> i think to have made a wrong  question.
>>
>> - I installed Dom0 with debian lenny and xen
>> - i configured network with the bridge method (xenbr0 - xenbr1)
>> - installed and configured apache with proxy module
>> - installed and configured two web servers with apache / php5 / mysql
>>
>> all servers are connected to the internet and intranet (which allow
them
>> to work togheter in a private netork)
>>
>> i dont need any help by you about proxy - web server and other stuff ..
>> but actually i need help to configure the Dom0 in order to allow the
proxy
>> to work fine. I guess .. i missing some configuration on Dom0 with the
>> command "route" .. seems that there is a problem with the
proxy which is not
>> able to forward the request by using xenbr0 (which is the eth0 on Dom0)
>>
>> thank you so much Simon
>>
>>
> I''m going to assume a few things here
>
>    1. All VMs can talk to each other
>    2. All VMs are connected to the xenbr0 network
>    3. The Dom0 can access the real network
>
> If these are true then I need something from you. Can you give me the
> output of
>
> brctl show
>
> Depending on your version of Xen the network is set up different ways. What
> we want is for the physical ethernet device to be attached to the xenbr0 if
> you want the VMs to communicate with the real network as if they were real
> Servers. You may find that you have two bridges - eth0 (which peth0 is a
> member) and xenbr0 (which vif1.0 and vif2.0 are members). If this is the
> case then traffic from the eth0 bridge will not traverse thin air and end
up
> on xenbr0. You might need to add peth0 to xenbr0.
>
> Grant McWilliams
>

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Mirco Santori wrote:
>svrlnx05:/# brctl show
>bridge name    bridge id        STP enabled    interfaces
>xenbr0        8000.00238b174296    no        eth0
>                             vif1.0
>xenbr1        8000.00238b174297    no        eth1
>                             vif1.1
>
>1.	All VMs can talk to each other -> yes
>2.	All VMs are connected to the xenbr0 network -> yes
>3.	The Dom0 can access the real network -> yes
>
>actually .. i cannot realize what happening ..
OK, so you have the guest systems running, the networking is all up 
and running, so what is the question ? What exactly is it that isn''t 
working ?

It''s very hard trying to help because you aren''t telling us
what''s
wrong. You started with what appeared to be a non Xen wuestion (how 
to setup two web servers and proxy), no I''ve no idea at all.

-- 
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

On Tue, Sep 22, 2009 at 11:17 AM, Simon Hobson
<linux@thehobsons.co.uk>wrote:
> Mirco Santori wrote:
>
>  svrlnx05:/# brctl show
>> bridge name    bridge id        STP enabled    interfaces
>> xenbr0        8000.00238b174296    no        eth0
>>                            vif1.0
>> xenbr1        8000.00238b174297    no        eth1
>>                            vif1.1
>>
>> 1.      All VMs can talk to each other -> yes
>> 2.      All VMs are connected to the xenbr0 network -> yes
>> 3.      The Dom0 can access the real network -> yes
>>
>> actually .. i cannot realize what happening ..
>>
>
> OK, so you have the guest systems running, the networking is all up and
> running, so what is the question ? What exactly is it that isn''t
working ?
>
> It''s very hard trying to help because you aren''t telling
us what''s wrong.
> You started with what appeared to be a non Xen wuestion (how to setup two
> web servers and proxy), no I''ve no idea at all.
>
>
> --
> Simon Hobson
>
I gathered from his message that he couldn''t communicate with the
outside
world from the VMs but they can talk to each other which now seems a bit
odd.

Mirco,   From your brctl output it looks like you have one DomU on xenbr0
and one DomU on xenbr1 and both bridges also have a physical ethernet device
attached to them. I also assume that these two VMs can''t talk to each
other
because that would make no sense whatsoever.

Can you give us the output from ifconfig on the Dom0?
Can you give us the output from iptables -L on Dom0


Grant McWilliams


_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users