Date: Tue, 12 Jun 2012 17:10:48 +0200 From: Palle Girgensohn <girgen@FreeBSD.org> To: freebsd-net@FreeBSD.org Subject: VIMAGE, epair/if_bridge or netgraph? Message-ID: <4FD75BF8.50606@FreeBSD.org> In-Reply-To: <4FD66519.8030503@FreeBSD.org> References: <4FD66519.8030503@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm updating some jail servers, and want to use VIMAGE. Compiled it into the kernel, learned the hard way not to even include PF in the same kernel [1], so now it works quite well. I am setting up many similar jails, some for testing, some for production. The applications are web servers, som tomcat+apache's, and some other standard type of services like email and ldap, simple stuff. I need no fancy network control, I just need it to work. For each jail there are two interfaces, one public, connected to a software bridge (if_bridge or ng_bridge) acting as a switch, and one internal, for maintenance, connected to a different software bridge. To each software bridge, I connect a physical external interface from the jail host. I am trying to decide whether to use epair and if_bridge, or to use netgraph. For netgraph, there is a nice package at DruidBSD [3]. When I found that, I had already rewritten the standard jail script, using the v2 patches from polymorf [4]. They work equally fine for my purpose. So now I need to know which scales best, is there a difference in performance or stability between netgraph and epair/if_bridge? Cheers, Palle [1] http://forums.freebsd.org/showthread.php?t=31765 [2] http://forums.freebsd.org/showthread.php?t=31949 [3] http://druidbsd.sourceforge.net/vimage.shtml [4] http://wiki.polymorf.fr/index.php?title=Howto:FreeBSD_jail_vnet -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJP11v4AAoJEIhV+7FrxBJDdqoIAI8SHZJbXgvRX6r9Qh5Gr6wz geT16OZXre1qdO8juQnWBt04KYFmuFIrdfLSnMJg8xnsIgtVo5YTedfdG6OjS6RM ztOQvVRPKoSWe07sEhd7GLTDJay0QLu1zADI9IPQStyhffW08z7n1U2FngEtaeDh 2fQhHgI2A1y6NzjChtM6pnK45Gzi08oogGhq3e7A9GQRHhDZLX65m4rtYG7T2Q3U K9cWfPQyH1gn/5Zhakc43uLGWkIzWWqrk6IyU4e0swVTRPZvaZeHyfK7Ni0ysKtd SNE2B3uy6yc5i9o/kFlYAq2nLz8Igs1OwWzarzFAtJg0VcJ+Z1ALw7CRoKHbkz0= =UqA0 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FD75BF8.50606>