lkml.org 
[lkml]   [2006]   [Jun]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: strict isolation of net interfaces
    Serge E. Hallyn wrote:
    > The last one in your diagram confuses me - why foo0:1? I would
    > have thought it'd be
    >
    > host | guest 0 | guest 1 | guest2
    > ----------------------+-----------+-----------+--------------
    > | | | |
    > |-> l0 <-------+-> lo0 ... | lo0 | lo0
    > | | | |
    > |-> eth0 | | |
    > | | | |
    > |-> veth0 <--------+-> eth0 | |
    > | | | |
    > |-> veth1 <--------+-----------+-----------+-> eth0
    > | | | |
    > |-> veth2 <-------+-----------+-> eth0 |
    >
    > [...]
    >
    > So conceptually using a full virtual net device per container
    > certainly seems cleaner to me, and it seems like it should be
    > simpler by way of statistics gathering etc, but are there actually
    > any real gains? Or is the support for multiple IPs per device
    > actually enough?
    >

    Why special case loopback?

    Why not:

    host | guest 0 | guest 1 | guest2
    ----------------------+-----------+-----------+--------------
    | | | |
    |-> lo | | |
    | | | |
    |-> vlo0 <---------+-> lo | |
    | | | |
    |-> vlo1 <---------+-----------+-----------+-> lo
    | | | |
    |-> vlo2 <--------+-----------+-> lo |
    | | | |
    |-> eth0 | | |
    | | | |
    |-> veth0 <--------+-> eth0 | |
    | | | |
    |-> veth1 <--------+-----------+-----------+-> eth0
    | | | |
    |-> veth2 <-------+-----------+-> eth0 |


    Sam.
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-06-30 04:51    [W:0.024 / U:59.360 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site