On 4/21/2015 12:39 PM, [email protected] wrote: > Hi > > My office is getting a Xen on linux server donated. Looks like I'm on > the hook to get it up and running. > > Been reading and testing bits and pieces. Most seem pretty straight > forward. > > I have a question about using Shorewall on the Xen machine to provide > firewall for the machine Hosts, the Guests, and machines on the office > lan. > > I have been reading the 'XenMyWay' shorewall article. > > I can see how it's done there. > > IIUC that's one of three ways I can think of to handle the firewall, > > (1) 2 ethernet interfaces in the Dom0 host, shorewall on the Dom0 > (2) 1 ethernet interfacs in the Dom0 host, 1 eth intfc in a DomU guest, > shorewall in the Guest, > (3) 2 ethernet interfaces in the DomU guest, shorewall in the DomU > guest, guest internal intfc connected to an Ethernet switch. > > I'm looking for any comments or advice for which way is the 'sanest' > approach, and to understand why. > > I'd appreciate any ideas!
As you can tell by the Xen articles on the Shorewall site, I've only used approach (1). I was tempted to try (3), but abandoned Xen in favor of KVM then LXC. In both of the latter, I also had Shorewall running in the host. Sorry that I can't be of more help, -Tom -- Tom Tom Eastep http://www.shorewall.net
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
