[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-wizards
Subject:    Re: [fw-wiz] VM system for firewall use
From:       John Babwell <johnbabwell () mailcan ! com>
Date:       2004-10-11 20:14:40
Message-ID: 20041011151440.56feb2a7 () prana-bindu
[Download RAW message or body]

If you have control over the whole box, choose the new open source
hypervisor Xen.  It will do all this and very efficiently (Xen is
extremely cool). 
http://www.cl.cam.ac.uk/Research/SRG/netos/xen/

On Mon, 11 Oct 2004 17:52:16 +0400
ArkanoiD <ark@eltex.net> wrote:

> nuqneH,
> 
> Looks like i am being forced into designing all-in-one box with extended
> functionality, combining firewall and a buch of services i really don't like
> putting into firewall, but they say it's marketing demand ;-)
> 
> The serives are antispam/anitvirus filters/IDS corellator and so on.
> I strongly decline running those in the same address space. So using
> system call wrappers like FreeBSD jail is not sufficient. I'd prefer
> BSD-like system, but only thing that does fit my needs seems to be
> User Mode Linux. Are there other things worth detailed analysis?
> boschs (if i remember the name correctly) has terrific performance overhead,
> vmware is proprietary..
> 
> Another question is inter-instanse communication. I need a kind of loopback
> interface to let components to talk to each other without allowing access
> to physical NIC when it is not required. Any hints?
> 
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@honor.icsalabs.com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
> 


-- 
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
[prev in list] [next in list] [prev in thread] [next in thread]