From owner-freebsd-net@FreeBSD.ORG Mon May 28 13:46:00 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 0C1BC1065670 for ; Mon, 28 May 2012 13:46:00 +0000 (UTC) (envelope-from nvass@gmx.com) Received: from mailout-us.gmx.com (mailout-us.gmx.com [74.208.5.67]) by mx1.freebsd.org (Postfix) with SMTP id B837C8FC16 for ; Mon, 28 May 2012 13:45:59 +0000 (UTC) Received: (qmail invoked by alias); 28 May 2012 13:45:52 -0000 Received: from g224205173.adsl.alicedsl.de (EHLO [192.168.178.28]) [92.224.205.173] by mail.gmx.com (mp-us002) with SMTP; 28 May 2012 09:45:52 -0400 X-Authenticated: #46156728 X-Provags-ID: V01U2FsdGVkX1+0coBRr4K04oBVF5Vzrwq3xvJd7d5ny2mmUo1PAK NG4cdksLarg0xW Message-ID: <4FC3818A.8080801@gmx.com> Date: Mon, 28 May 2012 15:45:46 +0200 From: Nikos Vassiliadis User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10 MIME-Version: 1.0 To: darrenr@freebsd.org References: <4FC36377.1080306@freebsd.org> In-Reply-To: <4FC36377.1080306@freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 Cc: freebsd-net@freebsd.org Subject: Re: Point-to-point connection between jails? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2012 13:46:00 -0000 On 5/28/2012 1:37 PM, Darren Reed wrote: > I've looked through the list of network interfaces that are > supported with FreeBSD and none seem to meet my needs. What > I want is a network interface that I can configure up in > jail A with address 10.1.1.1 and for which I can configure > a mate in jail B with the address 10.2.2.2 and use the > network interface as the means by which two jails can > directly communicate with each other without the need to > send any packets out of the machine. Or another way to do > this would be to have a virtual network (something like the > "internal network" that VirtualBox has or the host only > network supported by VMWware Workstation) defined somewhere > and for there to be a specific driver that could be > configured and attached to a jail and that virtual network > so that you could have N:M communication between jails. > > Is what I'm looking for already present and google is failing > me or is the above functionality the basis for future work, > be it planned or otherwise? It seems like a loopback interface does this. root@raidmadi:/home/nik # jls JID IP Address Hostname Path 3 10.2.3.4 / 4 10.7.3.4 / root@raidmadi:/home/nik # ifconfig lo1 lo1: flags=8049 metric 0 mtu 16384 options=3 inet 10.2.3.4 netmask 0xff000000 inet 10.7.3.4 netmask 0xff000000 root@raidmadi:/home/nik # Maybe you want 'real' isolation? like with epair and VIMAGE? Did I misunderstand your question? Nikos