Xen VPS

Assuming others have looked into (or already are) providing virtual 
private servers to customers using Xen, I'm curious what approaches you've 
taken to prevent customers from doing antisocial networking things?...i.e. 
arping for IPs that aren't theirs, forging source address, stealing 
unused/other VM IPs.

The bridged setup seems to be the most common/default/efficient in use of 
IPs, but it looks like it's going to be a serious PITA to secure.

The more I look at it, the more I'm tempted to try doing a routed setup 
using private IPs and 1:1 NAT in dom0 to give each vm a static public IP.

----------------------------------------------------------------------
  Jon Lewis                   |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
-- 
Eat sushi frequently. - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list