Re: [Xen-users] Live Migration Config

[Mark Williamson <mark.williamson@xxxxxxxxxxxx>]

> > Right now (and particularly with Xen 2.0, since it exports the management
> > interface over HTTP), the rule is basically not to have anything you
> > don't trust be able to access dom0 over the network.
>
> If this migration happens via http, you can probably firewall the port
> on your dom0 to only accept connections from certain ip adresses ?
> Or am I missing something ?

Yes, firewalling is also fine; of course you still have to trust that no 
machines on the same network are capable of IP address spoofing (or trust 
them not too).

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users