From: James R. L. <jl...@mi...> - 2000-05-01 02:56:06
|
On Sun, Apr 30, 2000 at 10:13:14PM -0400, Gerald Britton wrote: > > I don't see an easy way for the ethertap-based virtual network to operate in > > a host routed network. F.e. the host acts as the gateway to the uml private > > network and provides firewall services (IP MASQ). > > The way all this would work, the virtual net would look just like an ethernet > to both the host system (as network interface tap0) and to the virtual systems > (as network interface eth0) ... these can be treated as any other ethernet > and if the host machine has an uplink connection, it can route between them. By attaching to eth0 with a PF_PACKET socket you do not even need to configure bridging on the host system. I have that working right now, in fact, I'm telnet'ed out of a uml right now :-) I'm trying to get the tap0 to work as well. I figure that can be used to to implement the host system acting as a router (or firewall). > If the host has an ethernet connection, the host can either route between the > two, or it can setup bridging between the two networks so they seem to be one > larger ethernet. This allows arbitrary firewalling to be potentially setup > between the real network and the virtual network, or it allows for the virtual > network to act as if it were directly part of the real network. > > -- Gerald -- James R. Leu |