Re: [Vserver] network isolation implementation - pros and cons

[Daniel Lezcano]

Matt Rechenburg wrote:

Hi Daniel,

i found veth very usefull  (http://www.geocities.com/nestorjpg/veth/).
It is a user-space tool which creates a separated virtual interfaces
using tun/tap

stay tuned,


Hi Matt,

I downloaded and played with it. Very interesting, thanks.

Vserver usually use a ip aliasing hiding the IP part to all other 
vserver, right ? Do you know for which reasons someone could use the 
veth instead of the vserver mechanism ? (I mean some other reasons than 
dhcp)


  -- Daniel

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] network isolation implementation - pros and cons

[Daniel Lezcano]

Hi guys,

I am collecting informations concerning existing network 
isolation/virtualization done in several container solutions like 
openvz, xen, vserver, metacluster, bsd jails, etc ...


The objective is to find the cons and pros for each solutions. For 
example, can we do broadcast and multicast between containers on the 
same machine ? What is the performance impact ? Is the ressource 
management easy to implement ? Is the network more difficult to manage ? 
Do we need specific user tools ? If my application does bind 
INADDR_ANY:80, can I connect via loopback address ? etc ...


The collected information will be compiled in order to write a paper.

Has someone informations on that ? url ? faq (not vserver) ? or time to 
answer ? ;)


Thanks in advance

-- Daniel
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver