Blaisorblade wrote:
> 
> You require the host admin to assign new IPs to the host, so it cannot be 
> directly supported (I mean, even if we merge the code the end user must still 
> do a lot of manual setup).

That's right.
I knew I would have to set up the IP beforehand, and that would not be a
problem for me.


> Also, security is a concern - you'll do this in a private environment, but 
> giving the user semi-automated tools for such stuff is not exciting. con=port 
> is not ideal for non-local connection (we listen on *, not on lo, and this 
> can already be bad but...).

The user can break his (her) system as much as he (she) likes. I don't
consider it is a problem. As long as the user does not escape UML,
con=port can't be modified, and there's no problem. And if he (she)
escapes, he (she) can run anything and bind to any port on any IP, so I
don't think it is any worse.

Moreover, the ability to bind to a specific IP would allow to bind to
127.0.0.1 (or ::1 iv IPv6 is supported) which would be safer than *.


> Wouldn't it be simpler to setup port forwarding on the host (either with 
> iptables or with a forwarding daemon) than to add this code to UML itself? 
> Optimization is not a concern here, maintainability is.

I don't care about optimization here... ;-)
Anyway, as far as I (as a user) am concerned, I think it would be easier
to attribute a management IP to each guest, and have each guest listen
on the same port on its own IP, rather than attribute a port number to
each guest + have to remember what host it runs on or have to setup some
redirection.


Cheers,

Nicolas

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
User-mode-linux-user mailing list
User-mode-linux-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-user

Reply via email to