From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kashyap Thimmaraju Subject: Deployment usage and performance of a network domain Date: Thu, 8 Jun 2017 14:32:53 +0200 Message-ID: <593943F5.3030108@sec.t-labs.tu-berlin.de> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="------------050208050602080106040707" Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: xen-devel@lists.xen.org Cc: George Dunlap List-Id: xen-devel@lists.xenproject.org This is a multi-part message in MIME format. --------------050208050602080106040707 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I'm Kashyap Thimmaraju, a second year PhD student at TU Berlin in Germany. This is my first post here, and I'm a Xen newbie. I saw George Dunlap's presentation "Securing Your Xen-Based Cloud" at the LinuxCon on youtube recently as I am interested in using the driver domain for networking. In the presentation he proposed placing the network driver and forwarding functionality (bridge, iptables, etc.) into a (network) driver domain. This is indeed good for security. However, I am curious if people are really adopting such an approach. Are there cloud providers or PV vendors deploying such an architecture? If so, is there any impact on the networking performance of say VM-VM or VM-Internet traffic? Thanks, - -- Kashyap Thimmaraju Security in Telecommunications TU Berlin / Telekom Innovation Laboratories Ernst-Reuter-Platz 7, Sekr TEL 16 / D - 10587 Berlin, Germany Phone: +49 30 8353 58351 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJZOUP1AAoJEKEOZw+VIHXN8usH/RHhBw9xXSyp8zrxBcCOH+/G o3maD+LV5fHBxKlAsSPOAV88LdZI9SKEUvChqj/pLESTEYzvGdc/wwShBepczMjm XIiCb+B5WkXUOqNEwjERZAzhptnHH6asNbPTsPQm7u634LCncSmNrWHSEpZpMeCQ +eAa52ywKO/ArXODUzKqhuFRVrdFeKASbGb3rL93cogOC1TDiSrdzX3mHUvJe9qJ iRlKUaJi6IeNbxa29W1hbED/NJfg7lWFSBuB55glX08ORxsEk3MATnnHXeYw9VMk Yxpg6zxsaqnYO60HCksSjeuj7KLyfEiWIELnRkBCdptpaPKfJnTilNdt1aD5ALw= =jPVg -----END PGP SIGNATURE----- --------------050208050602080106040707 Content-Type: text/x-vcard; name="kashyap_thimmaraju.vcf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="kashyap_thimmaraju.vcf" bnVsbA== --------------050208050602080106040707 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3RzLnhlbi5v cmcveGVuLWRldmVsCg== --------------050208050602080106040707--