Jeppe Toustrup wrote:
> Hi
> 
> I am trying to make a plan for an OpenSolaris server which will host some 
> zones, each with their own vnic.
> For this setup I would like to have a filtering transparent bridge in front 
> of the zones, which could conveniently be located on the same server, by 
> using Crossbow. However, it seems like there isn't any bridging available in 
> OpenSolaris, I could only find the etherbridge and RBridges projects, where 
> as the first is abandoned and the later is still in development.
> 
> Do you have any suggestions as to how this could be made? Could I use 
> RBridges for this, and it is stable enough for production use?

I don't think you need bridging for this application.  The system will
allow VNICs to communicate with each other by default, and you can
configure IP filter in each zone (assuming you're using exclusive stack
zones).

In short, bridges allow layer 2 forwarding between multiple physical
ports; they have very little to do with communication among zones.

At a guess, what you might really be after is a way to place filters for
an exclusive stack zone outside of that zone's control.  I don't think
there's a way to do that yet, though it's certainly a reasonable thing
to have, and the L2 Filtering project may be able to provide it in the
future.

-- 
James Carlson         42.703N 71.076W         <[email protected]>
_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to