Re: Network stack cloning / virtualization patches

From: Vincent Jardin (vjardin_at_wanadoo.fr)
Date: 05/26/03

  • Next message: Attila Nagy: "Re: A problem with too many network interfaces" 
    To: Marko Zec <zec@tel.fer.hr>, hackers@freebsd.org, net@freebsd.org
Date: Mon, 26 May 2003 08:57:26 +0200

    Congratulation.

    Since the last EuroBSD 2002 conference, there are 2 architectures to support
    VPNs with FreeBSD : your patch and the Riccardo Scandariato one
    (http://softeng.polito.it/freebsd/) that is very good too.

    From a VPN point of view, how could both projects be compared ?

    Do you think that both projects could be merged or are there too much
    differences between your two projects ?

    Regards,
      Vincent

    Le Lundi 26 Mai 2003 01:04, Marko Zec a écrit :
    > Hi all,
    >
    > at http://www.tel.fer.hr/zec/vimage/ you can find a set of patches
    > against 4.8-RELEASE kernel that provide support for network stack
    > cloning. The patched kernel allows multiple fully independent network
    > stack instances to simultaneously coexist within a single OS kernel,
    > providing a foundation for supporting diverse new applications,
    > including:
    >
    > - Enhanced virtual hosting (think of jails with its own private set of
    > network interfaces, IP addresses, routing tables, ipfw and dummynet
    > instance etc.);
    > - High-performance real-time network simulation / emulation;
    > - Fully isolated overlay VPN provisioning (using IP tunnels), including
    > the possibility of creating nested VPNs.
    >
    > The network stacks are embedded in new resource container entities
    > named "virtual images". Each process and network stack instance within
    > the system has to be associated with a virtual image, which in effect
    > becomes a light or pseudo virtual machine entity. Additional goodies
    > include the possibility to control some other resources besides the
    > network stack, most notably the independent CPU load and usage
    > accounting, as well as feedback-driven proportional share scheduling
    > among virtual images. For more details, check the above URL.
    > Note that the patch was designed to allow all existing applications and
    > utilities to run unmodified on the patched kernel, so no recompiling of
    > the userland is necessary.
    > Hope you'll find use for the new framework :-)
    > Cheers,
    >
    > Marko
    >
    > _______________________________________________
    > freebsd-net@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-net
    > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Attila Nagy: "Re: A problem with too many network interfaces"

    Relevant Pages

    • Re: Network stack cloning / virtualization patches
      ... Since the last EuroBSD 2002 conference, there are 2 architectures to support ... VPNs with FreeBSD: your patch and the Riccardo Scandariato one ... > against 4.8-RELEASE kernel that provide support for network stack ... The patched kernel allows multiple fully independent network ...
      (freebsd-hackers)
    • Re: Network stack cloning / virtualization patches
      ... Riccardo's VPN patches were designed specifically for supporting VPNs by ... basically virtualizing only the IP routing tables. ... spawn new processes bound to a specific network stack instance. ...
      (freebsd-hackers)
    • Re: Network stack cloning / virtualization patches
      ... Riccardo's VPN patches were designed specifically for supporting VPNs by ... basically virtualizing only the IP routing tables. ... spawn new processes bound to a specific network stack instance. ...
      (freebsd-net)
    • Re: [PATCH] Introduce compat_u64 and compat_s64 types
      ... architecture doesn't support them it is already remotely crashable. ... Did you audit the complete network stack? ... They're expected to run only a subset of the network stack? ...
      (Linux-Kernel)
    • Re: IPSEC VPN
      ... While IPsec tunnel mode works in Windows XP, we don't support the use of ... that for client remote-access VPNs. ...
      (microsoft.public.windows.server.security)