# Multiple interfaces in a new proxy server, but physical or virtual?

At the moment, user devices have multiple IPs if they need to access multiple services.

All devices are physically connected into to the same switched network. I know it's bonkers and am pleased to say it had nothing to do with me.

I am introducing a pair of servers, to act as router/proxy/firewall/vpn, replacing a lot of existing archaic infrastructure.

I've reached a point where I can either do this:

# using physical ports
eth0 - 10.0.0.0/24     # The main network, dhcp'd user devices live here.
eth1 - 172.16.0.0/24   # a couple of out-of-scope routers in here.
eth2 - 192.168.0.1/24   # in-scope and out-of-scope servers and stuff.
eth3 - 81.x.x.x/x      # internet facing


or:

# using virtual ports
eth0   - 10.0.0.0/24
eth0:0 - 172.16.0.0/24
eth0:1 - 192.168.0.1/24
eth1   - 81.x.x.x/x


Considering the server pair, the first option requires 8 interfaces/8 switch ports while the second option only requires 4 interfaces/4 switch ports.

What should I be considering when making this decision?

-
You realize that the 192.168.0.1/8 is masking away public address space you don't own? Are you sure you got that mask right? –  Zoredache Jun 14 '13 at 20:53
thanks, a brain fart I think –  Mr Not A. Clue Jun 14 '13 at 21:02