|
Re: Differences between venet and veth [message #26253 is a reply to message #26251] |
Fri, 18 January 2008 16:03 |
khorenko
Messages: 533 Registered: January 2006 Location: Moscow, Russia
|
Senior Member |
|
|
Hi rema,
> Can somebody explain what Performance Fast (veth) / Fastest (venet) mean.
> Is this just a mathematical difference or a "human noticeable" .
Well, look in ideal situation the speeds of venet and veth can be roughly equal, but! If you are going to use bridge with veth and have many VEs, then there can be a LOT of broadcast packets in the net and all the VEs would have handle them - and this might significantly decrease the network speed.
(i even don't speak about the intentional broadcasts generation by an attacker)
> I think i must use veth because my hw_firewall blocked venet based VPS because of no MAC-Adresses.
Excuse me, can you please explain what do you mean under "hw_firewall"? "Firewall configuration on the Hardware Node"? If yes - why not to reconfigure the firewall?
Regards,
Konstantin
If your problem is solved - please, report it!
It's even more important than reporting the problem itself...
|
|
|
|
Re: Differences between venet and veth [message #26306 is a reply to message #26280] |
Mon, 21 January 2008 09:42 |
khorenko
Messages: 533 Registered: January 2006 Location: Moscow, Russia
|
Senior Member |
|
|
Hello rema,
rema wrote on Sun, 20 January 2008 00:14 |
The firewall is a Hardwarefirewall with IDS inside.
This can't be disabled because i would like to protect my hosts from the net
|
Well, in this case there should be no difference for external Hardwarefirewall if a packet was sent from the Hardware Node (VE0) or from a VE, cause the packet from the VE will also have the MAC - the MAC of the Hardware Node, so you can also configure Hardwarefirewall to handle the packet.
Quote: |
With Broadcast you mean smb and so on?
If so this won't be a problem because there are just LAMP-Systems on the host.
|
Well, yes, for example - smb.
Ok, i just warn you about the possible situations.
Regards,
Konstantin
If your problem is solved - please, report it!
It's even more important than reporting the problem itself...
|
|
|