Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been searching for a smart solution for a XenServer firewall for about a month now. The documentation for the new default networking backend "openvswitch" is not that detailed and I can barely find guides to filter packages with OVS. The other possibility would be linux bridge with iptables (which I am going to evaluate in the next couple days).

How are you firewalling with you XenServers? Do you use the Dom0 for it, do you have a dedicated VM for it ... ?

share|improve this question

My implementation is by deploying a PV Guest dedicated to performing firewall duties. But you still should harden dom0, though.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.