3

Is it possible for both Xen host and Xen guest to share same IP (albeit with different ports)?

We have a single public IP, and want to have both the Xen host (as host only, no other role) and the Xen guest, to use it.

Thanks.

1
  • I’m about to build this as well, but I don’t want to the guest system to have a private ip, but instead will make the host have a private, or both the same. Let’s see how that goes. Mar 28, 2016 at 9:24

2 Answers 2

4

To achieve this assign the public ip to host system. Then forward the required port from host system to guest system.

Suppose your guest is a web server then you need to forward port 80 from host to port 80 of guest so that every request for port 80 on public ip will be forwarded to port 80 of guest.

Suppose you have assigned public ip to eth0 and your guest's ip is 192.168.1.2, then you have to tell host that it should do NAT/MASQUERADE so that the virtual machines have internet access. You also have to tell host which ports it should forward to which IP address. You can refer following script.

#!/bin/sh

GUEST_IP=192.168.1.2

echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

### Port Forwarding ###

### web server 
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 80 -j DNAT --to $GUEST_IP:80

### mail server 
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 25 -j DNAT --to $GUEST_IP:25
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 143 -j DNAT --to $GUEST_IP:143
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 110 -j DNAT --to $GUEST_IP:110

The first two commands enable Nat/Masquerad'ing on host

### Port Forwarding ###

Here you put as many rules as you need. This tells host to forward certain ports to certain destination ports on certain destination IP addresses.

1
  • You should add, where to put this script. Should this be placed in /etc/rc.local ?
    – rubo77
    Feb 20, 2016 at 20:31
1

You should think about the virtualized machine as about real machine. You shouldn't have two machines with the same IP in your network. But you may use some bridge, NAT, port forwarding, if your goal is to hide the presence of virtualized environment.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .