jails and multple interfaces

Hi Folks,

I am trying to set a jail hosting server to support multiple jails for development testing.

The server has two network interfaces, I am configuring one for host server to use, and the other with several aliased IPs, one for each of the jail servers.

All the services running on the host are configured to bind to the host IP on the first interface.

The crux is both interfaces on the same network, I am seeing the expected arp errors (e.g. kernel: arp: x.x.x.x is on int0 but got reply on int1), now I know I set the sysctl variable net.link.ether.inet.log_arp_wrong_iface=0 to get rid of these messages, but what I want to know if there are any other problems I am going to have having both interfaces live on the same network. Also even though I have the jail host's services all binding to the first interfaces ip, there is not guarantee that network traffic originating from the jail host will only use its primary interface/IP, is their anyway to ensure that the jail host does not try to talk through the interface being used by the jails?

Thanks
Jeff
_______________________________________________
freebsd-stable@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: setup unable to determine the dns name of this computer.
    ... Ethernet adapter Local Area Connection: ... The machine has two interfaces on the motherboard. ... The domain controller on the network is also a W2K3 server with two ... because there is an application server running on it that requires them both. ...
    (microsoft.public.exchange.setup)
  • Re: setup unable to determine the dns name of this computer.
    ... > Ethernet adapter Local Area Connection: ... > The machine has two interfaces on the motherboard. ... this server, disable one interface and see what happens. ... > the network and I have been considering stopping it from being this (I ...
    (microsoft.public.exchange.setup)
  • Re: Closing information leaks in jails?
    ... > restricted devfs in the jail (devfsrules_jail for example from ... but the primary IP address of the interfaces. ... > - some interesting information about the network related stuff via netstat ...
    (FreeBSD-Security)
  • Re: Make a jail visible in different networks
    ... I need to have my jail serving in both LAN and VPN networks. ... static routes between your 10.5.1/24 subnet and your 192.168.1/24 subnet, or setting up additional VPN endpoint on the 192.168.1/24 network, or using NAT to map the jail IP onto the 10.5.1/24 netblock. ... 192.168.1.1 xl0 is linked to other remote server through tun0 with openvpn. ... As I said before, I'm also running mpd4 listening on ng0, and a jail with samba services on 192.168.1.10 xl0 alias. ...
    (freebsd-questions)
  • Re: jails and multple interfaces
    ... The server has two network interfaces, I am configuring one for host ... All the services running on the host are configured to bind to the host ... I have the jail host's services all binding to the first interfaces ip, ...
    (freebsd-stable)