Re: [vserver] RE : VServer vs OpenVZ.

From: Art -kwaak- van Breemen <ard_at_telegraafnet.nl>
Date: Fri 10 Dec 2010 - 12:49:05 GMT
Message-ID: <20101210124905.GE15725@telegraafnet.nl>

On Fri, Dec 10, 2010 at 10:43:33AM +0100, Ghislain wrote:
> this part is quite often asked, do you know someone that use it and
Guilty, in multiple ways...

> could share the knowledge on how to set ip up on a wiki page ?

I am not that of a typer. I can paste some scripts, and others
have too. Daniel Hozac helped a lot by fixing some minor issues
in util-vserver.

The thing is that you need a tiny script to move your interface
into the right network namespace. But what interface you move
into the namespace is totally depending on you.
I've got two setups:
Per vlan a network namespace:
- a vserver that's just there to hold the namespace, and get's
  the complete vlan device. The creation and moving of the vlan
  device is an extra tiny script.
- standard vserver guests within that vservers network namespace.
  This is fully supported out of the box since SVN2912 or so..

This setup is useful for big irons (blades) that have multiple
DMZ's with network secured vservers (network namespaces combined
with network context's).

Per software bridge a network namespace:
- a single vserver that gets a veth device with a tiny script.
  That veth device is put into the software bridge and into the
  vserver. There is no real practical way to fix this from
  util-vserver, except for using the default start hooks.
  The veth device get's a mac-address based on the context id of
  the vserver and the vlan id the software bridge is connected to.

This setup is good for tunnel servers that tunnels traffic but
the server itself keeps completely out of band.
Received on Fri Dec 10 12:49:16 2010

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 10 Dec 2010 - 12:49:17 GMT by hypermail 2.1.8