RE: [Xen-users] Re: Live Migration Config

To:	"Alan Greenspan" <alan@xxxxxxxxxxx>, <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject:	RE: [Xen-users] Re: Live Migration Config
From:	"Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx>
Date:	Sun, 30 Oct 2005 13:45:18 -0000
Cc:	ian.pratt@xxxxxxxxxxxx
Delivery-date:	Sun, 30 Oct 2005 13:42:39 +0000
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index:	AcXdVly7H6PVdMmgSrKvAxta8HGtCwAAPGtg
Thread-topic:	[Xen-users] Re: Live Migration Config

 
> The following configurable controls should be implemented for 
> Xen migration.
> 
> 1. The migration port.
> 2. The network interface(s) that the migration service listens on.
> 3. The maximum # of allowed concurrent incoming migrations 
> from a foreign host.
> 4.  Observance of the /etc/hosts.allow and /etc/hosts.deny 
> access controls (or the same within a Xen config file).
> 5.  Some simple way to turn off incoming migration completely.

1, 2 & 5 are already possible; 4 is simple and is on the todo list[*]. 3
is more of a higher level tools issue.

The correct soloution is probably to have an 'xm migraterx' command that
generates a session key that has to be handed to 'xm migratetx'. The
actual transfer can then be authenticated, and potentially encrypted.
However, this will not be in 3.0.0.

[*] The intention is that the set of allowable hosts be specificed in
xend-config.sxp e.g.: (migration-hosts-allow "*.test.xensource.com"
"129.34.45.0/24" "xenbits.xs.org" )

It would be good if someone could knock the above up.

Ian


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users