Re: [Xen-users] Securing the host''s networking ?

Dominique Rousseau
Tue, 17 May 2005 07:11:59 -0000

Le Mon, May 16, 2005 at 10:17:34AM -0400, Dana Lux [dana.lux@gmail.com] a
écrit:
> Internet <---> eth0 <---> xen-br0 <----> Xen guests
>
> I do have two questions:
>
> First, I''ve noticed that on most bridging HOWTO''s they
state that eth0
> should be set to 0.0.0.0, however I''ve noticed that on my machine
it
> is configured with an IP (via the distribution init scripts) and that
> xen-br0 simply copies its IP.  Is this normal ?

Yes, that''s how it is supposed to be (in a simple case like yours).
The matter is that an interface that once an interface is part of a
bridge it doesn''t see traffic on ethX anymore but on brX, so in cases
described in the HOWTOs they just consider that ethX should as well have
0.0.0.0
But in the case of the xen scripts, they just copy the IP of ethX to brX
so as not to cut the network link.



Dom

--
Dominique Rousseau
Neuronnexion, Prestataire Internet & Intranet
57, route de Paris 80000 Amiens
tel: 03 22 71 61 90 - fax: 03 22 71 61 99 - http://www.neuronnexion.fr