Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been searching for a smart solution for a XenServer firewall for about a month now. The documentation for the new default networking backend "openvswitch" is not that detailed and I can barely find guides to filter packages with OVS. The other possibility would be linux bridge with iptables (which I am going to evaluate in the next couple days).

How are you firewalling with you XenServers? Do you use the Dom0 for it, do you have a dedicated VM for it ... ?

share|improve this question

1 Answer 1

My implementation is by deploying a PV Guest dedicated to performing firewall duties. But you still should harden dom0, though.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.