crossbow discuss - Jan 2009 - Crossbow with Router/Firewall and proxy server

OpenSolaris 2008.11 is the version with the latest Crossbow bits installed.

Using Crossbow for virtual networking the global zone would have the external
(public) IP, and the router/firewall would have a private IP as well as the
reverse proxy server.

How would one setup a virtual network to host a public website using crossbow so
when they point to www.mynewhost.com that goes to public IP xxx.xxx.xxx.xxx will
go to the reverse proxy server which will be a zone and networking will be done
using Crossbow?

I have read the docs on Crossbow and understand the etherstubs and vnics and
setting up a router and having the reverse proxy in a zone and having that all
work, but my stumbling block is the global zone having the public IP and getting
traffic passed thru the router firewall to the reverse proxy.
-- 
This message posted from opensolaris.org

Gary Bainbridge wrote:
> OpenSolaris 2008.11 is the version with the latest Crossbow bits installed.
> Using Crossbow for virtual networking the global zone would have the
external (public) IP,
 > and the router/firewall would have a private IP as well as the 
reverse proxy server.

If you give the fw zone the public address,
you can use the magic of IPFilter''s "rdr".

Giving the Global zone an externally visible addr is risky <g>

Thanks, I was going with the public IP to the global as I noted.  I''ll
read up on rdr for ipfilter.
-- 
This message posted from opensolaris.org