Xen users - Jul 2006 - DMZ on xen with Dom0 as gw

Hi alls,

I have to publish DomUs on the Net, with public IPs.

On my host, eth0 is configured with aliases to serve all these IPs:

	       eth0   = 192.168.0.12
Net <-> Dom0-  eth0:1 = 192.168.0.13
               eth0:2 = 192.168.0.14

I would configure DomUs to have 10.0.100.0/24 IP address, and to
forward ( source/dest-natting) traffic, simulating a DMZ with Dom0 as
gateway:
   
            Dom0
        192.168.0.12  
Net <-> 192.168.0.13  <---> 10.0.100.2 DomU1
        192.168.0.14  <---> 10.0.100.3 DomU2

I have also to run a dhcp server for DomUs.

I read a lot of Docs, and ML archive.
I tried to apply these solutions, but without success.

I would like to ask which is the best way to create such scenario (and
first of all, is It a good scenario?)

For now, I tried to run dhcpd on dummy0 and to bridge DomUs on dummy0.
Then natting with iptables on Dom0.

Maybe I''m following a wrong way and my problems arise for that.

BR

efphe



_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Federico Tomassini wrote:
> I have to publish DomUs on the Net, with public IPs.
> I would configure DomUs to have 10.0.100.0/24 IP address, and to
> forward ( source/dest-natting) traffic, simulating a DMZ with Dom0 as
> gateway:
Why are you using a Gateway and NAT? You only need this if you havent 
enough public IPs.

Give the Public IPs to the DomUs and make a bridging-firewall.

regards norman




_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users