Network stack cloning / virtualization patches

Vincent Jardin vjardin at wanadoo.fr
Sun May 25 23:57:27 PDT 2003


Congratulation.

Since the last EuroBSD 2002 conference, there are 2 architectures to support 
VPNs with FreeBSD : your patch and the Riccardo Scandariato one 
(http://softeng.polito.it/freebsd/) that is very good too.

From a VPN point of view, how could both projects be compared ?

Do you think that both projects could be merged or are there too much 
differences between your two projects ?

Regards,
  Vincent

Le Lundi 26 Mai 2003 01:04, Marko Zec a écrit :
> Hi all,
>
> at http://www.tel.fer.hr/zec/vimage/ you can find a set of patches
> against 4.8-RELEASE kernel that provide support for network stack
> cloning. The patched kernel allows multiple fully independent network
> stack instances to simultaneously coexist within a single OS kernel,
> providing a foundation for supporting diverse new applications,
> including:
>
> - Enhanced virtual hosting (think of jails with its own private set of
> network interfaces, IP addresses, routing tables, ipfw and dummynet
> instance etc.);
> - High-performance real-time network simulation / emulation;
> - Fully isolated overlay VPN provisioning (using IP tunnels), including
> the possibility of creating nested VPNs.
>
> The network stacks are embedded in new resource container entities
> named "virtual images". Each process and network stack instance within
> the system has to be associated with a virtual image, which in effect
> becomes a light or pseudo virtual machine entity. Additional goodies
> include the possibility to control some other resources besides the
> network stack, most notably the independent CPU load and usage
> accounting, as well as feedback-driven proportional share scheduling
> among virtual images. For more details, check the above URL.
> Note that the patch was designed to allow all existing applications and
> utilities to run unmodified on the patched kernel, so no recompiling of
> the userland is necessary.
> Hope you'll find use for the new framework :-)
> Cheers,
>
> Marko
>
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"



More information about the freebsd-hackers mailing list