Subject: Re: [vserver] Virtual Host-Only Networking (tap?)
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Sun, 12 Sep 2010 18:10:15 +0200

On Sat, Sep 11, 2010 at 11:27:13AM +0200, Adrian Reyer wrote:
> On Sat, Sep 11, 2010 at 08:28:41AM +0800, Jeff Jansen wrote:
> > We use the 'dummy' interface for this. 'modprobe dummy' and now you've
> > got 'dummy0' as an interface on the host.  (You can also have dummy1,
> > dummy2, etc. by running 'modprobe numdummies=X' where 'X' is the number
> > of dummy interfaces you want.)

> We use 'lo:N' here and a private address range. What is the benefit of
> 'dummy'? Basic setup just nanmes 'lo' as
> /etc/vservers/NAME/interfaces/X/dev.

there are none, using dummyX, the traffic will still
run over 'lo' otherwise the packets would get dropped
silently, because that's exactly what dummyX is for

best,
Herbert

> > You can treat this just like any other interface on the host and assign
> > a different IP address to each guest and you have a truly host-only
> > networking device.
> 
> Does this make the hosts iptables passing the 'FORWARD' chain? 'lo'
> won't.
> 
> Regards,
> 	Adrian
> -- 
> LiHAS - Adrian Reyer - Hessenwiesenstraße 10 - D-70565 Stuttgart
> Fon: +49 (7 11) 78 28 50 90 - Fax:  +49 (7 11) 78 28 50 91
> Mail: lihas@lihas.de - Web: http://lihas.de
> Linux, Netzwerke, Consulting & Support - USt-ID: DE 227 816 626 Stuttgart