Re: [Xen-users] domain0 ?

[Mark Williamson <mark.williamson@xxxxxxxxxxxx>]

> But I'm wondering about domain0.... Should I treat domain0
> as a slimmed down management domain which I just use to run
> the other domU's or can I use domain0 for some major services
> which the machine is running (web,smtp etc)?

It's more secure to keep dom0 minimal.  Also, for most services, there's no 
need to run them in dom0: they should run just as fast in a domU, with better 
isolation.

> What's best practice? I'd like to minimise the number of IP's I need
> for my XEN box, so ideally would like to use dom0 for serveral
> server functions (in addition to running XEN).

How about configuring Iptables rules to redirect the appropriate ports to 
different domains?  You won't need loads of IP addresses but you'll get the 
proper Xen isolation.

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users