Re: [PATCHv3 1/2] conf: add <listen> subelement to domain <graphics> element

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jul 27, 2011 at 04:37:13PM +0100, Daniel P. Berrange wrote:
> On Wed, Jul 27, 2011 at 11:20:42AM -0400, Laine Stump wrote:
> One further thought, is should we even store 'port' on the listen
> element. I know technically this lets you configure different
> port numbers for different interfaces, but this feels somewhat
> error prone for clients.
> 
> eg consider a guest A
> 
>     <listen addr='10.0.0.1' port='5902'>
>     <listen addr='192.168.0.1' port='5909'>
> 
> and guest B
> 
>     <listen addr='10.0.0.1' port='5904'>
>     <listen addr='192.168.0.1' port='5902'>
> 
> 
> And DNS enter 'somehost.example.com' which has two A
> records
> 
>  somehost.example.com A 10.0.0.1
>  somehost.example.com A 192.168.0.1
> 
> Connecting to 'somehost.example.com' guest A you need to
> be very careful not to accidentally get guest B.

It actually gets even worse if you consider a not uncommon
DMZ setup where each host is configured with addresses from
a private range like 10.0.0.x, but all users connect to the
machine using completely different a public IP address. In
such a case there'd be no way to reliably determine which
port to use for a guest when conencting to the public IP
if multiple different ports per VM allowed.

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list


[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]