Hi all,
After reading vPF_Ring userguide, i have some doubts about how to
implement it in a KVM host with three vm guests.
First of all, my current scenario:
- CentOS 6.4 x86_64 (fully patched) in a HP ProLiant with 32 GiB RAM,
16 cores and a dual broadcomm nic (tg3) in a PCi-x bus.
- Three CentOS 6.4 x86_64 virtual guests (fully patched) running
bro-ids, suricata and snort (only one per guest).
Ok, as you can see, my first problem is with dual broadcomm nic: I can
not to configure pci-passthrough for these guests, and I have more
guests than physical nics (I can use only one nic for sniff traffic),
then could this be a problem?? And can I configure pf_ring to bind it
only to one nic instead of both??
Next. According to userguide I need to install pf_ring in kvm host and
to patch qemu. Is it necessary to patch in latest qemu versions released
by RedHat?? This can be a big problem to maintain qemu packages in
RHEL-based distros ...
last question from kvm host side: Is it recommended to configure port
mirroring using tc utils to mirror traffic from physical nic?? maybe it
is a stupid question :))
From the guest side: Is it not needed to install pf_ring module in kvm
guest?? Do I need to install vnplug module and pf_ring library only?? Is
it ok to use virtio-net drivers in guests nics or is it best to use e1000??
Many thanks.
--
CL Martinez
carlopmart {at} gmail {d0t} com
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
