In article <200701171851.14734.dim at openvz.org> (at Wed, 17 Jan 2007 18:51:14 +0300), Dmitry Mishin <dim at openvz.org> says: > =================================== > L2 network namespaces > > The most straightforward concept of network virtualization is complete > separation of namespaces, covering device list, routing tables, netfilter > tables, socket hashes, and everything else. > > On input path, each packet is tagged with namespace right from the > place where it appears from a device, and is processed by each layer > in the context of this namespace. > Non-root namespaces communicate with the outside world in two ways: by > owning hardware devices, or receiving packets forwarded them by their parent > namespace via pass-through device. Can you handle multicast / broadcast and IPv6, which are very important? --yoshfuji