Not understanding networking (beware - tons of questions!) [SOLVED] [message #29937] |
Wed, 30 April 2008 16:19  |
jergendutch
Messages: 16 Registered: April 2008
|
Junior Member |
|
|
Hello,
I don't understand a lot about the way openvz handles networking.
I'm posting here because the forum seems really active, and hopefully someone can help 
1. The wiki says that veth is dangerous because a container owner can forge mac addresses and ip addresses, but can't the host protect against this?
2. I am using Ubuntu inside a container, and I get a default gateway of 192.0.2.1. I have no idea where this comes from and I can't ping it from the container. Should openvz handle this automagically?
3. Should I use a default gateway of the host, or of my router inside the container? tcpdump shows the data leaving venet0, but I don't see how the data could ever get back.
4. How does the data get back? 
5. There are two interfaces in the container, venet0 and venet0:0. The forum mentions this in a few places, but I can't find a post telling me why this exists. I've seen that there are various scripts for different Linux distributions but I can't see how openvz knows that a machine is e.g. Ubuntu. Is this the right direction to be going in? (At the moment I manually edit /etc/network/interfaces to remove the alias.)
Sorry for the mass of questions
[Updated on: Wed, 07 May 2008 12:38] Report message to a moderator
|
|
|