Re: [Xen-users] DomUs hidden behind Dom0 in the network?

[Niels Dettenbach <nd@xxxxxxxxxxxx>]

Am Dienstag, 21. August 2012, 13:17:43 schrieb Roger Pau Monne:
> If you are familiar with routers you can try OpenWrt, it has a very good
> build system that can generate Xen PV images directly, so you just need
> to create the image and use it directly or dd it to a hard drive
> partition or lvm lv. Then use this guest as you would use a normal
> router/firewall and make all your DomUs use this other DomU as gateway,
> proxy or whatever you need.

This sound's a bit like opverkill.

Just to make shure what i' had mean:

In xend-config.sxp:

(network-script network-nat)
(vif-script     vif-nat)


(instead of i.e. bridging or normal routing scripts - never tried xens NAT 
scrip's but i assume they do that what they are called ;).



Or do it similiar by hand with:

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j 
ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT


where eth0 is the "outgoing" network interface to LAN of the Dom0.



cheers,


Niels.
-- 
 ---
 Niels Dettenbach
 Syndicat IT & Internet
 http://www.syndicat.com
 PGP: https://syndicat.com/pub_key.asc
 ---

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users