[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Debian-User] Xen



On Sat, Feb 17, 2007 at 01:47:33PM +0100, Peter Teunissen wrote:
> 
> On 17-feb-2007, at 8:07, Admin wrote:
> 
> ><large snippage about beauty of Xen>
> >
> >BTW if anyone (I've seen a few Xen emails like the one where the  
> >AMD package disappeared only to be replaced by a 686 based Xen  
> >package that crashed)  would like to set up a Debian Xen thread  
> >maybe we could help one another as it seems that this  
> >virtualization thing does not interest most people.  But I think  
> >it's the future for computing.
> >
> >
> Just a small comment. I think a lot of readers on this list think Xen  
> is fascinating, but don't have the time, technical abillity etc. to  
> dive into it at this stage. Early adopters like you are needed  to  
> clear the path. I will certainly be following the thead, gathering  
> courage to use Xen somewhere in the future. Keep up the good work,  
> and don't be discouraged by the extreme ratio of lurker vs  
> contributors.... ;-)

I can tell you, having just done it, that xen is not that
difficult. I've successfully re-implemented my home server using xen,
and except for a lot of head scratching on the networking part, its
pretty darn easy (thanks Deb-devs!!). I now have the following setup:

Dom0 P4 based server with approx 450 gigs of RAID-5 storage in one big
lvm volume-group alongside .5gig RAID-10 swap and RAID-1 / partitions
(spread over 4 disks). I know its a monster for a home server, but
hey, its mine-all-mine baby!

Okay, Dom0 is on the LAN and serves up music, video, photos and pulls
backups (rdiff-backup with password-less login) from the other
machines on my LAN. 

I have two DomU's. DomU1 is my firewall running a standard 3 interface
shorewall installation and dhcp/dns for the LAN. My net interface is
brought up directly in the DomU by hiding it from Dom0
(pciback-hide). It gets ip from my cable modem. My loc interface is
bridged with eth0 in Dom0 to put the server (bigmomma) and my local
machine all on the same subnet (192.168.1.0). My DMZ interface is a
"phantom" bridge connecting DomU1 (firewall) to DomU2 (mail). That's
the hard part, getting that bridge configured. DomU2 is my mail server
and uses fetchmail to pull mail from various accounts, processes it
through clamav, and spamassassin finally dumping it to individual
users procmail recipes for storage in maildirs and served up by
dovecot imap. 

It works pretty slick, now that I've ironed out the kinks. As I said,
the most difficult part was getting the network setup right and
figuring out when to turn on and turn off dhcp stuff. Once that's
done, its easy-peasy. Except now I have three "machines" to maintain
where before I had two. But its worth it. I've actually eliminated 1
physical machine (my poor old 486 firewall) and made my system more
secure in the process. Previously I had my imap hosted on a server
within the lan portion of my firewall exposing me to vulnerabilities
in that service. now that is properly segregated and I am happy. I see
no issues in load on the machine either.

I am a happy xen user. 

A

Attachment: signature.asc
Description: Digital signature


Reply to: