From owner-freebsd-net@FreeBSD.ORG Tue May 29 07:50:55 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 99E021065675; Tue, 29 May 2012 07:50:55 +0000 (UTC) (envelope-from darrenr@freebsd.org) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) by mx1.freebsd.org (Postfix) with ESMTP id 5DDA28FC14; Tue, 29 May 2012 07:50:55 +0000 (UTC) Received: from compute2.internal (compute2.nyi.mail.srv.osa [10.202.2.42]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id C628C20E27; Tue, 29 May 2012 03:50:54 -0400 (EDT) Received: from frontend2.nyi.mail.srv.osa ([10.202.2.161]) by compute2.internal (MEProxy); Tue, 29 May 2012 03:50:54 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:date:from:reply-to :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; s=smtpout; bh=elcfcOAxs+J43d8zpe+EKY aJsQ8=; b=bQrm7F8atRZXYYFEufhvLC7Ty+SFZQSGNk+skBRXpR/GCiDXvy0gIl t2Pw27LVNQ5evdcecZygrVjk1xtCCG2esZK5b5hDqrbH6Z+OXhmTzxz9bjjGqsFm fPA3uz8t9fn0UwBaTFATJnOz86oV9X0P4UjkM2oZ3rBjwL8ZJ/SfQ= X-Sasl-enc: qUCScGKp5ES9o1bEqC8MmcLsYPhoqby142p8pdDg01dR 1338277854 Received: from [192.168.1.124] (unknown [202.45.110.141]) by mail.messagingengine.com (Postfix) with ESMTPA id 99BD44825F7; Tue, 29 May 2012 03:50:53 -0400 (EDT) Message-ID: <4FC4802E.4070105@freebsd.org> Date: Tue, 29 May 2012 17:52:14 +1000 From: Darren Reed Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: Julian Elischer References: <4FC36377.1080306@freebsd.org> <4FC3818A.8080801@gmx.com> <4FC3882C.5030105@freebsd.org> <4FC410A9.4000502@freebsd.org> In-Reply-To: <4FC410A9.4000502@freebsd.org> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Nikos Vassiliadis Subject: Re: Point-to-point connection between jails? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: darrenr@freebsd.org List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2012 07:50:55 -0000 On 29/05/2012 9:56 AM, Julian Elischer wrote: > On 5/28/12 7:14 AM, Darren Reed wrote: >> On 28/05/2012 11:45 PM, Nikos Vassiliadis wrote: >>> On 5/28/2012 1:37 PM, Darren Reed wrote: >>>> I've looked through the list of network interfaces that are >>>> supported with FreeBSD and none seem to meet my needs. What >>>> I want is a network interface that I can configure up in >>>> jail A with address 10.1.1.1 and for which I can configure >>>> a mate in jail B with the address 10.2.2.2 and use the >>>> network interface as the means by which two jails can >>>> directly communicate with each other without the need to >>>> send any packets out of the machine. Or another way to do >>>> this would be to have a virtual network (something like the >>>> "internal network" that VirtualBox has or the host only >>>> network supported by VMWware Workstation) defined somewhere >>>> and for there to be a specific driver that could be >>>> configured and attached to a jail and that virtual network >>>> so that you could have N:M communication between jails. >>>> >>>> Is what I'm looking for already present and google is failing >>>> me or is the above functionality the basis for future work, >>>> be it planned or otherwise? >>> It seems like a loopback interface does this. >>> >>> root@raidmadi:/home/nik # jls >>> JID IP Address Hostname Path >>> 3 10.2.3.4 / >>> 4 10.7.3.4 / >>> root@raidmadi:/home/nik # ifconfig lo1 >>> lo1: flags=8049 metric 0 mtu 16384 >>> options=3 >>> inet 10.2.3.4 netmask 0xff000000 >>> inet 10.7.3.4 netmask 0xff000000 >>> root@raidmadi:/home/nik # >>> >>> Maybe you want 'real' isolation? like with epair and VIMAGE? >> Yes, I was after real isolation but this might work. > > what you want is epair which is a pseudo driver pair, > specifically designed to connect two vimage jails to each other. Yes, that's it. A good example of using epairs can be found here: http://zewaren.net/site/?q=node/71 Something like this should be documented better on freebsd.org. Darren