Re: [Xen-users] dom0 networking

[Tim Post <tim.post@xxxxxxxxxxxxxxx>]

> > 2. Is such a setup has a security weakness that I'm not seeing?
> Don't know about that one

Any dom-u that broadcasts an IP with that configuration "owns" it. As
long as you specify a mac / ip in your config per dom-u that shouldn't
be an issue. 

If not, its possible for one dom-u to 'hijack' an IP owned by another. 

Really only an issue if untrusted people have root access to the
dom-u's. Its more likely to happen by accident than as some sort of
attack, especially if you're using dhcp. 

We do something similar with dom-u's we use for redundant in-line
firewalls and snort appliances, works very well :)

HTH

Tim


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users