Jails - IPv4 and IPv6

[Shamim Shahriar]

On Tue, 7 Aug 2018, 18:24 Philipp Vlassakakis, <
freebsd-en at lists.vlassakakis.de> wrote:

>
> Am 06.08.2018 um 20:21 schrieb Shamim Shahriar <shamim.shahriar at gmail.com
> >:
>
>
> Hi Philipp
>
> I'm using both IPv4 and IPv6 in my vNet jails. The IPv4 gets configured
> via the jail.conf, while v6 is via rc.conf from inside the jail, two lines
> to define v6 on epair and the gw as well. If you need, u can send you the
> configurations later.
>
> They are quite stable, the pf on the hosts controls the access, works as
> expected.
>
> Regards
>
>
> I would like to configure the IP addresses outside the jails, because
> customers may access these jails and I don't want customers to be able to
> simply change the IP addresses which might lead to the Jail being
> unreachable from the „outside“.
>

Hi Philipp

Not sure about the validity of that premise. From within the jail I can
always do ifconfig abc0 down or even add more IP in my jail, not to mention
all other stupid things I can do and loose connectivity to it. In my
limited understanding, I think jails are NOT designed to be a replacement
for well known VPS or similar (like esxi or xen). Rather, they are your own
personal VPS that share the resources of a physical server to minimize
wasted resources within that physical realm.

Maybe someone with a better understanding and knowledge can correct my
misconceptions and provide a few links so I can correct myself.

Best regards