[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bridging eth0/br0 & NetworkManager - can they coexist?



On 29/06/12 17:34, Neal Murphy wrote:
(...)
> another program running whose sole purpose is to slurp CPU cycles, take up
> screen real estate 

I'm all for machine efficiency, but I don't find NM to do either of
those.  On a laptop, I find it sacrifices my human efficiency to /not/
have it.

> and make me click-click-click...click-click-click-click to

- great description, though :)

> find what 'ip addr' would tell me. And if you are running a bunch of VMs, 
> you've moved beyond the utility of N-M; you do not want it controlling your 
> network.

Yes, I'm learning that this is clearly the case.

> You're doing pretty much what I do. I have four bridges (but only 3 NICs: one 
> bridge goes nowhere) for testing my firewalls (RED/GREEN/PURPLE/ORANGE). I can 
> have a number of firewalls running in KVMs, attached to any combination of 
> four bridges. I can direct Squeeze's default route to any of them or to the 
> bridge direct to my perimeter F/W.

Most of this could be achieved over a virtual network, though, couldn't
it?  I would use a virtual network for firewall testing.  I need real
network IPs for using real network resources, e.g. grabbing something
off a local server over NFS.


> The bridge device (e.g. br0) is a network interface. The NIC is a network 
> interface. The tap device (e.g. tap0) appears as a network interface to the 
> VM. A bridge device doesn't need a real NIC to operate. It's perfectly happy 
> to bridge zero or more taps to itself. The host doesn't need to actively use a 
> brX device (with IP address, et al) for it to bridge VMs together. 

I'm trying to get my head around this.  I need to read more on this
subject. :)

> Kernel-
> wise, a bridge device is very similar to a run-of-the-mill 8-port ethernet 
> switch: it bridges whatever is connected to it. Or it sits idle when it has no 
> member devices other than itself.

One thing that becomes apparent with (GNU/)Linux is the sheer number of
networking options that it's capable of. The ability to simulate complex
networks, for instance.

Thanks.

-- 
Steve Dowe

Warp Universal Limited
http://warp2.me/sd


Reply to: