OpenVZ Forum: Devel » Re: [patch 2/6] [Network namespace] Network device sharing by view

Home » Mailing lists » Devel » Re: [patch 2/6] [Network namespace] Network device sharing by view

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: strict isolation of net interfaces [message #4235 is a reply to message #4151]

Mon, 03 July 2006 14:53

Andrey Savochkin
Messages: 47
Registered: December 2005

Member

Sam, Serge, Cedric,

On Fri, Jun 30, 2006 at 02:49:05PM +1200, Sam Vilain wrote:
> Serge E. Hallyn wrote:
> > The last one in your diagram confuses me - why foo0:1? I would
> > have thought it'd be
> >
> > host | guest 0 | guest 1 | guest2
> > ----------------------+-----------+-----------+------------- -
> > | | | |
> > |-> l0 <-------+-> lo0 ... | lo0 | lo0
> > | | | |
> > |-> eth0 | | |
> > | | | |
> > |-> veth0 <--------+-> eth0 | |
> > | | | |
> > |-> veth1 <--------+-----------+-----------+-> eth0
> > | | | |
> > |-> veth2 <-------+-----------+-> eth0 |
> >
> > [...]
> >
> > So conceptually using a full virtual net device per container
> > certainly seems cleaner to me, and it seems like it should be
> > simpler by way of statistics gathering etc, but are there actually
> > any real gains? Or is the support for multiple IPs per device
> > actually enough?
> >
>
> Why special case loopback?
>
> Why not:
>
> host | guest 0 | guest 1 | guest2
> ----------------------+-----------+-----------+------------- -
> | | | |
> |-> lo | | |
> | | | |
> |-> vlo0 <---------+-> lo | |
> | | | |
> |-> vlo1 <---------+-----------+-----------+-> lo
> | | | |
> |-> vlo2 <--------+-----------+-> lo |
> | | | |
> |-> eth0 | | |
> | | | |
> |-> veth0 <--------+-> eth0 | |
> | | | |
> |-> veth1 <--------+-----------+-----------+-> eth0
> | | | |
> |-> veth2 <-------+-----------+-> eth0 |

I still can't completely understand your direction of thoughts.
Could you elaborate on IP address assignment in your diagram, please? For
example, guest0 wants 127.0.0.1 and 192.168.0.1 addresses on its lo
interface, and 10.1.1.1 on its eth0 interface.
Does this diagram assume any local IP addresses on v* interfaces in the
"host"?

And the second question.
Are vlo0, veth0, etc. devices supposed to have hard_xmit routines?

Best regards

Andrey

Report message to a moderator

[Message index]

		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Andrey Savochkin on Tue, 27 June 2006 09:38
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Daniel Lezcano on Tue, 27 June 2006 11:21
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Tue, 27 June 2006 11:52
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Herbert Poetzl on Tue, 27 June 2006 16:02
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Tue, 27 June 2006 16:47
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Ben Greear on Tue, 27 June 2006 17:19
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Herbert Poetzl on Tue, 27 June 2006 22:52
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Dave Hansen on Tue, 27 June 2006 23:12
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Alexey Kuznetsov on Tue, 27 June 2006 23:42
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Wed, 28 June 2006 03:38
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Herbert Poetzl on Wed, 28 June 2006 13:36
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Wed, 28 June 2006 14:21
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: jamal on Wed, 28 June 2006 13:53
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Sam Vilain on Thu, 29 June 2006 21:07
		strict isolation of net interfaces By: Cedric Le Goater on Thu, 29 June 2006 22:14
		Re: strict isolation of net interfaces By: Sam Vilain on Fri, 30 June 2006 02:48
		Re: strict isolation of net interfaces By: Andrey Savochkin on Mon, 03 July 2006 14:53
		Re: strict isolation of net interfaces By: Sam Vilain on Tue, 04 July 2006 03:00
		Re: strict isolation of net interfaces By: Daniel Lezcano on Tue, 04 July 2006 12:29
		Re: strict isolation of net interfaces By: serue on Fri, 30 June 2006 02:39
		Re: strict isolation of net interfaces By: Cedric Le Goater on Fri, 30 June 2006 08:56
		Re: strict isolation of net interfaces By: Herbert Poetzl on Mon, 03 July 2006 13:36
		Re: strict isolation of net interfaces By: Daniel Lezcano on Fri, 30 June 2006 12:23
		Re: strict isolation of net interfaces By: ebiederm on Fri, 30 June 2006 14:20
		Re: strict isolation of net interfaces By: Daniel Lezcano on Fri, 30 June 2006 15:22
		Re: strict isolation of net interfaces By: ebiederm on Fri, 30 June 2006 17:58
		Re: strict isolation of net interfaces By: serue on Fri, 30 June 2006 16:14
		Re: strict isolation of net interfaces By: ebiederm on Fri, 30 June 2006 17:41
		Re: strict isolation of net interfaces By: ebiederm on Fri, 30 June 2006 18:09
		Re: strict isolation of net interfaces By: Sam Vilain on Tue, 04 July 2006 13:13
		Re: strict isolation of net interfaces By: Daniel Lezcano on Tue, 04 July 2006 13:19
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: jamal on Fri, 30 June 2006 00:15
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Herbert Poetzl on Fri, 30 June 2006 03:35
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Andrey Savochkin on Fri, 30 June 2006 07:45
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: jamal on Fri, 30 June 2006 13:50
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Andrey Savochkin on Fri, 30 June 2006 15:01
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Fri, 30 June 2006 18:22
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: jamal on Fri, 30 June 2006 21:51
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Sat, 01 July 2006 00:50
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: ebiederm on Wed, 28 June 2006 14:51
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Alexey Kuznetsov on Tue, 27 June 2006 16:49
		Re: [patch 2/6] [Network namespace] Network device sharing by view By: Andrey Savochkin on Tue, 27 June 2006 11:55

Previous Topic:	Re: [Vserver] Re: Container Test Campaign
Next Topic:	porting stable patch to higher kernel versions

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sat Aug 02 14:19:55 GMT 2025

Total time taken to generate the page: 0.56430 seconds