[uml-devel] Re: uml_switch security fixing

[Nuutti K. <na...@ik...>]

bla...@ya... wrote:
> Suggestions?

FWIW, we have gone off using switch daemon entirely. We are using
simply preallocated tap devices, connected to bridges via normal Linux
bridging controls. Works cleaner and faster, more places to dump the
traffic from and it allows normal linux traffic queueing and
firewalling to be used to limit transfers between machines.

All physical networks and virtual network (networks not connected to
any physical interfaces) are implemented as bridges.

The only problem was the tap device queue hang (SIGIO problem), which
was resolved with the one queue option (and hopefully fixed in UML or
mainline kernel later).

-- Naked