Re: [Xen-users] Cannot setup domU as router between Inet, LAN and farm of virtual servers

[Matthias Wolf <matthias.wolf@xxxxxx>]

Thanks, Jerry, 

what you're proposing is exactly what I'm trying to do, but i simply can't 
figure out, howt to modify the config-files or scripts, respectively. I read 
the users-manual as well as several networking-howtos and the wiki over and 
over again, but I seem to miss the very information I'm in need of. Any 
further hints? 

Regarding the network redesign: What I'm going to try next is *not* to hide 
the pci-interfaces from the dom0 but to create multiple bridges (e.g. 
brInet, brLan and brDmz) and to pass those into the domU which can then 
"route" between them. 

Bests
Matthew 

p.S.: I don't know if this is of any interest: To me is seems almost 
impossible to figure out *how* to configure more than one interface/bridge 
or whatever concerning the network. One only gets the information that one 
would have to adapt the network and the vif-scripts accordingly, but I can't 
see how this has to be done. I'd gladly add that part, but I'm far too 
unsure of what I'm doing to dare. Maybe when I'm through this. 



Jerry Amundson schrieb: 

> On 2/15/07, Matthias Wolf <matthias.wolf@xxxxxx> wrote:
> > What I want to do is: 
> >
> > Hide the 2 PCI-interfaces from dom0 (no problem), use them in a domU (no
> > problem), and add a virtual interface which should be enslaved to the
> > bridge which connects all domUs.
> "Hide", by definition, does not allow the  "virtual" - the dom0 can't
> make virtual what it can't see.... 
>
> > When I don't set up any bridge-stuff (network-script network-bridge) and
> > (vif-script vif-bridge) I receive a domU which acts as router between
> > Internet and LAN (dom0 is invisible in that configuration, and itself
> > can't reach the Internet)
> Naturally. 
>
> > Can anyone give me a hint, how I have to adapt the scripts as to receive
> > that router?
> First you should redesign the network configuration, maybe including a
> "dummy" virt-interface (dom0/domU's only), or maybe one nic hidden,
> one bridge, but using iptables within the router-domU for net smarts,
> or a like variation... 
>
> jerry 
>
> --
> "Pay no attention to that man behind the curtain!"


Matthias Wolf
wolf office team                             /"\
Bïro-EDV-Systeme OEG tel:  +43(1)892 45 76   \ / ASCII Ribbon Campaign
Linke Wienzeile 236  mailto:office@xxxxxx     X   against HTML-email
1150 Wien            http://www.wot.at       / \       & vcards
***********************************************************************
Lektor f. DB-Systeme an den
FH des bfi Wien sowie St.Pïlten

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users