Re: Xen VPS

Jeff Koch <jeffkoch-z9rozGE7tQ3bqFK/qXjecwC/[email protected]> Tue, 20 Oct 2009 15:27:42 -0400
Newsgroups gmane.org.operators.internet-access
Message-ID <[email protected]>
Hi Jon - we use Xen but have not had this issue. Seems like the same 
problem would occur with non-virtual dedicated servers. Plus, if we ever 
found anyone playing these games he/she would be terminated immediately.

Jeff



At 02:56 PM 10/20/2009, you wrote:
>Assuming others have looked into (or already are) providing virtual
>private servers to customers using Xen, I'm curious what approaches you've
>taken to prevent customers from doing antisocial networking things?...i.e.
>arping for IPs that aren't theirs, forging source address, stealing
>unused/other VM IPs.
>
>The bridged setup seems to be the most common/default/efficient in use of
>IPs, but it looks like it's going to be a serious PITA to secure.
>
>The more I look at it, the more I'm tempted to try doing a routed setup
>using private IPs and 1:1 NAT in dom0 to give each vm a static public IP.
>
>----------------------------------------------------------------------
>   Jon Lewis                   |  I route
>   Senior Network Engineer     |  therefore you are
>   Atlantic Net                |
>_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
>--
>Eat sushi frequently. - Avi
>[email protected] is the human contact address.
>[email protected] is the list posting address.
>See below URL for subscribe/unsubscribe and list options:
>http://inet-access.net/mailman/listinfo/list

Best Regards,

Jeff Koch, Intersessions 

-- 
Eat sushi frequently. - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list