Re: Xen VPS
Jeff Koch <jeffkoch-z9rozGE7tQ3bqFK/qXjecwC/[email protected]> Tue, 20 Oct 2009 15:27:42 -0400
| Newsgroups | gmane.org.operators.internet-access |
|---|---|
| Message-ID | <[email protected]> |
Hi Jon - we use Xen but have not had this issue. Seems like the same problem would occur with non-virtual dedicated servers. Plus, if we ever found anyone playing these games he/she would be terminated immediately. Jeff At 02:56 PM 10/20/2009, you wrote: >Assuming others have looked into (or already are) providing virtual >private servers to customers using Xen, I'm curious what approaches you've >taken to prevent customers from doing antisocial networking things?...i.e. >arping for IPs that aren't theirs, forging source address, stealing >unused/other VM IPs. > >The bridged setup seems to be the most common/default/efficient in use of >IPs, but it looks like it's going to be a serious PITA to secure. > >The more I look at it, the more I'm tempted to try doing a routed setup >using private IPs and 1:1 NAT in dom0 to give each vm a static public IP. > >---------------------------------------------------------------------- > Jon Lewis | I route > Senior Network Engineer | therefore you are > Atlantic Net | >_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ >-- >Eat sushi frequently. - Avi >[email protected] is the human contact address. >[email protected] is the list posting address. >See below URL for subscribe/unsubscribe and list options: >http://inet-access.net/mailman/listinfo/list Best Regards, Jeff Koch, Intersessions -- Eat sushi frequently. - Avi [email protected] is the human contact address. [email protected] is the list posting address. See below URL for subscribe/unsubscribe and list options: http://inet-access.net/mailman/listinfo/list