From owner-freebsd-stable@FreeBSD.ORG Wed Jan 31 10:07:17 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 23BEE16A405 for ; Wed, 31 Jan 2007 10:07:17 +0000 (UTC) (envelope-from jeff@sailorfej.net) Received: from mail.sailorfej.net (mail.sailorfej.net [66.93.72.123]) by mx1.freebsd.org (Postfix) with ESMTP id F116113C4AA for ; Wed, 31 Jan 2007 10:07:16 +0000 (UTC) (envelope-from jeff@sailorfej.net) Received: from [192.168.150.100] (c-24-20-239-104.hsd1.mn.comcast.net [24.20.239.104]) (authenticated bits=0) by mail.sailorfej.net (8.13.4/8.13.4) with ESMTP id l0V9ovHR067570 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 31 Jan 2007 01:50:58 -0800 (PST) (envelope-from jeff@sailorfej.net) Message-ID: <45C06A42.6000001@sailorfej.net> Date: Wed, 31 Jan 2007 02:06:58 -0800 From: Jeffrey Williams User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: freebsd-stable@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-2.6 required=6.0 tests=BAYES_00 autolearn=failed version=3.1.1 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on mail.sailorfej.net Subject: jails and multple interfaces X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2007 10:07:17 -0000 Hi Folks, I am trying to set a jail hosting server to support multiple jails for development testing. The server has two network interfaces, I am configuring one for host server to use, and the other with several aliased IPs, one for each of the jail servers. All the services running on the host are configured to bind to the host IP on the first interface. The crux is both interfaces on the same network, I am seeing the expected arp errors (e.g. kernel: arp: x.x.x.x is on int0 but got reply on int1), now I know I set the sysctl variable net.link.ether.inet.log_arp_wrong_iface=0 to get rid of these messages, but what I want to know if there are any other problems I am going to have having both interfaces live on the same network. Also even though I have the jail host's services all binding to the first interfaces ip, there is not guarantee that network traffic originating from the jail host will only use its primary interface/IP, is their anyway to ensure that the jail host does not try to talk through the interface being used by the jails? Thanks Jeff