Complex networking scenario

paul@stimpsonfamily.co.uk
2012-11-22T19:28:52Z

Hi everyone,

I''m new to Xen having been steered into a project at work as the
resident Linux
user. I''m trying to set up some networking and I''m finding it
very taxing (it''s
way more in-depth iptables and networking that I''m used to).
I''d really be
grateful if someone could help me please.

There are 3 VMs: an HVM WIndows server 2008 R2 guest with the PV drivers
installed and 2 Ubuntu 10.04 PV installs.

The Networks:

A - 10.1.2.0/24 - The company network (on physical eth0)
B - 172.16.2.0/24 - Physical network connected to a hardware data receiver
product. (physical eth1)
C - 192.168.99.0/23 - Private LAN in Xenland used to connect the VMs together
and to the host.
D - Xenbr0 (192.168.99.1/24) - The default gateway for the VMs on the private
LAN.
E - Physical interface eth2 - Bridged into xenbr0 to provide physical
maintenance access into the guests'' world from a laptop.

What I''m trying to achieve:

1. Each guest should have a single network connection onto the virtual 192.168
(C) LAN.
2. I have a single IP address available on network A so I need to NAT all the
192.168 addresses of the VMs so they can all get access to the company LAN.
3. I have a single IP address available on network B so I need to NAT all the
VMs so they can access the data receiver.
4. The data receiver produces a multicast stream. I need the VMs to be able to
subscribe to it with IGMP and the multicast UDP to make its way across the host
and onto the C network to them when subscribed (or all the time if
that''s much
easier)
5. I do NOT want the multicast to leak out onto LAN A or machines on LAN A to be
able to subscribe.
6. All packets from the VMs not addressed on the 192.168 or 172 networks need to
be forwarded through the host to the company LAN (with ESTABLISHED and RELATED
returns allowed)
7. Port 80 incoming on physical eth0 (LAN A) is redirected through the host to
the webserver on one of the VMs (192.168.99.20:80)


From my research, I believe that the stock Ubuntu server kernel on the host
won''t forward multicast on its own and I need some software agent to
handle the
subscriptions and passing of the UDP multicast data. IGMPProxy, XORP or pimd
seem to "do the right thing" but I''m not sure which to choose
or how to set them
up (particularly in the case of XORP which seems very flexible and to have a lot
of learning curve)

I think my head is about to explode.

Thank you in advance,
Paul.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xen.org