Subject: Re: [vserver] Virtual Host-Only Networking (tap?)
From: "Daniel Hokka Zakrisson" <daniel@hozac.com>
Date: Sun, 12 Sep 2010 01:18:21 +0200 (CEST)

Gordan Bobic wrote:
> I'm trying to set up a host-only network/VLAN that is only available to
> the host and guests, wthout access further than that via the host. What
> I'm thinking about is setting up a tap device on the host, and giving
> each of the guests access to that interface.
>
> I couldn't find any documentation on this. Would it work? Is there a
> better way?

What interface the IP address is on doesn't at all matter. If you
firewall it to ensure that it cannot go outside of the host, or is
only allowed to talk on lo, you will have successfully contained it.
All host-local traffic uses lo anyway.

-- 
Daniel Hokka Zakrisson