I am trying to install Xen 3.2 on Debian Lenny on a server with 2 NICs, one connected to the private LAN and the other to the Internet. This server has been in operation in a non-Xen state for a while and everything works fine. With Xen, however, networking isn't coming up properly. I'm having a hard time figuring out the proper way to configure this, as there is a lot of conflicting advice on the Xen site/wiki, mailing lists and even here.
Here are the basics: eth0 is the private network, eth1 is the public Internet. Ultimately, I want dom0 (and all domU's) to have access to both interfaces. There is currently an iptables script in place (from pre-Xen use) that sets up a firewall and port forwarding for other client machines on the private network. So even before I worry about installing a domU, I'm trying to get things working for bridging, knowing that's where I need to be.
The Xen Networking wiki and the Debian Xen wiki both point me toward using Xen's bridging scripts, but when I do this, eth1 does not come up automatically at boot time, so dom0 does not have access to the public network. It comes up fine when I
sudo ifup eth1 manually. Note that I'm not even worrying about domU's yet, and I'm well aware that the out-of-the-box Xen bridging won't do anything for eth1 <-> domU.
This ServerFault question advises against using the Xen bridging scripts. I tried this configuration and dom0 can't access either private or public networks.
This mailing list thread says that the Debian bridge-utils package should do everything I need, but it seems to imply that if I want my dom0 to be on the public network, I have to assign an address to both the real eth1 as well as the bridge. So I need to burn two public addresses in this case?
# The loopback network interface auto lo iface lo inet loopback # The primary network interface auto eth1 allow-hotplug eth1 iface eth1 inet static address 126.96.36.199 netmask 255.255.255.248 network 188.8.131.52 broadcast 184.108.40.206 gateway 220.127.116.11 # dns-* options are implemented by the resolvconf package, if installed dns-nameservers 127.0.0.1 dns-search lightyearsoftware.com auto eth1:0 iface eth1:0 inet static address 18.104.22.168 netmask 255.255.255.248 network 22.214.171.124 broadcast 126.96.36.199 gateway 188.8.131.52 # Internal network auto eth0 allow-hotplug eth0 iface eth0 inet static address 192.168.1.1 netmask 255.255.255.0 network 192.168.1.0 broadcast 192.168.1.255 # mtu 9000 # memory alloc failures with 2.6.26-2 e1000 driver #auto br-eth0 br-eth1 #iface br-eth0 inet manual # bridge_ports eth0 #iface br-eth1 inet manual # bridge_ports eth1
(network-script network-dummy) when the last 4 lines of the
interfaces file are uncommented,
(network-script network-bridge) otherwise.
I'm more than happy to provide any other diagnostic information that can help.