+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 31
Internet Related/Filtering/Firewall Thread, Smoothwall and Xen in Technical; Has anyone got Xentools onto Smoothwall NG? Or (if Tom's watching) do Smoothwall have a solution for this already (have ...
  1. #1

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46

    Smoothwall and Xen

    Has anyone got Xentools onto Smoothwall NG? Or (if Tom's watching) do Smoothwall have a solution for this already (have had a browse through the support site, but nothing mentioned.

    Cheers

  2. #2


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 849 Times in 671 Posts
    Rep Power
    196
    I'm watching, yeah I believe it has been done - but as far as I know, you have to use SmoothWall outside of the paravirtualised mode.

    Will get some more info on this and get back to you.

  3. #3

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,624
    Thank Post
    1,240
    Thanked 778 Times in 675 Posts
    Rep Power
    235
    Quote Originally Posted by Willott View Post
    Has anyone got Xentools onto Smoothwall NG?
    I've just been told by SmoothWall technical support that SmoothWall doesn't work under Xen. The install procedure seems to run okay, but when SmoothWall reboots after install it doesn't bring any ethernet interfaces up. Running "ifconfig -a" shows me an ethC and ethD, and if I give ethC an IP address and bring it up ("ifconfig ethC 10.0.0.2", "ifconfig ethC up") I can ping 10.0.0.2 from my workstation and get a reply, however I can't log in to any web interface on 10.0.0.2 (I assume because nothing's listening).

    Willott: did you configure a Xen VM to run SmoothWall? If so, how did you get the networking to work?

    --
    David Hicks

  4. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 849 Times in 671 Posts
    Rep Power
    196
    We're actually buggering about with various virtualisation platforms in the office today - got NG looking fine on Xen, albeit not the paravirtualised one. Compatibility with more hypervisors (and full support) is high on our list.

    I'm not in the office tomorrow, but call and speak to Rob Faulkner - 0113 3874181 see what he can help you with.

  5. Thanks to tom_newton from:

    dhicks (25th November 2009)

  6. #5


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,638
    Thank Post
    275
    Thanked 778 Times in 605 Posts
    Rep Power
    223
    Quote Originally Posted by tom_newton View Post
    We're actually buggering about with various virtualisation platforms in the office today - got NG looking fine on Xen, albeit not the paravirtualised one. Compatibility with more hypervisors (and full support) is high on our list.

    I'm not in the office tomorrow, but call and speak to Rob Faulkner - 0113 3874181 see what he can help you with.
    Is there any eta with this / beta testing? Or anything we can do to help with testing? I'm also interested in SG on Xen, mainly so I can convert my last ESXi host over (it's holding the SG vm).

  7. #6


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 849 Times in 671 Posts
    Rep Power
    196
    Pete,

    No ETA on "make it perfect" - tho working paravirtualised on Xen should be in before the end of next year, but we already have NG on a couple of Xen servers. One seems to have worked a whole metric buttload easier than the other. I am a few steps removed from the process ATM though - I will call Rob and point him in this general direction ;-P

  8. #7

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    Running Xenserver 5.0 update 3 and have it running successfully (though possibly a little slowly due to the kind of virtualisation used). I believe that there's someone at Smoothwall running a cluster of NGs on Xen (the hardcore kind, not the Citrix version), so it definitely runs. I didn't have any issues with networking - created a new machine with a single interface in Xenserver, ran install - configuring NIC. Job done (as far as I remember). Sorry I can't be more help! Maybe try reinstalling with a single NIC, then add a second once you have the first working (it's strange that they show as ethC and ethD tbh).

    @Tom: I'd be happy to test any Xen Kernel stuff if you need it - I believe for Xen support it's a kernel patch (I seem to remember Imran finding a link to something of use) - get on with it

    Possibly useful and interesting links:
    XenParavirtOps - Xen Wiki
    Also seems that on xen.org there are sources for kernels with Xen bits already in (would mean adding in necessary NG bits, but the Xen bit would be done!)

  9. #8

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    Quote Originally Posted by tom_newton View Post
    One seems to have worked a whole metric buttload easier than the other.
    Slightly off topic (well... quite a lot) - but I'm not aware of a quantity of a metric buttload - how does it compare to an imperial buttload?

    Back on topic - what difficulties were there (I guess this is where Rob could probably answer)?

  10. #9


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 849 Times in 671 Posts
    Rep Power
    196
    Quote Originally Posted by Willott View Post
    Slightly off topic (well... quite a lot) - but I'm not aware of a quantity of a metric buttload - how does it compare to an imperial buttload?

    Back on topic - what difficulties were there (I guess this is where Rob could probably answer)?
    They are the same - but you can get fined off the EU for using metric. Apparently

    Difficulties were between citrix xen and "hardcore xen" I think.

  11. #10

    Join Date
    Jan 2009
    Location
    England
    Posts
    1,524
    Thank Post
    301
    Thanked 304 Times in 263 Posts
    Rep Power
    83
    Running Citrix XenServer 5.5 here with Smoothwall installed for several months. Not using it in production yet (still testing!), but it's been working fine for us in the non-paravirtualised mode

  12. Thanks to Soulfish from:

    tom_newton (26th November 2009)

  13. #11

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,624
    Thank Post
    1,240
    Thanked 778 Times in 675 Posts
    Rep Power
    235
    Quote Originally Posted by Willott View Post
    (it's strange that they show as ethC and ethD tbh).
    I'm running the open source version of Xen that comes with CentOs 5.1, which is probably getting on a bit now. Hmm, I suppose I could try upgrading the version of CentOS used on the server?

    The VM's config file configures networking in the following way:

    Code:
    vif = ['type=ioemu, bridge=xenbr0', 'type=ioemu, bridge=xenbr1']
    Which seems standard enough - certainly when the VM starts up, a vifx.0 and vifx.1 get placed in xenbr0 and xenbr1 bridges respecitvly. Oddly, I've just noticed that the two ethernet ports that SmoothWall recognises seem to get enumerated differently every time the VM reboots - we're now up to ethI and ethJ. This means that, on reboot, SmoothWall looks for, say, ethF but doesn't find it because it's now called ethI. Anybody any idea why it does this, or seen anything similar happen?

    --
    David Hicks

  14. #12

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    I used to have an issue on my old home file server whereby it would swap the network ports around on reboot (so my external IP would suddenly be on the internal card and vice versa). I can't remember fully, but I may have used udev to resolve - the dell article below seems to give some clues (page 3 has details about the udev line) - whether Smoothwall has udev or not I'm not sure (and I'm not sure how it may affect the machine). Can you specify mac address in the Xen machine config? Just a random wondering as to whether the mac address of the virtual nic is changing and causing issues.

    http://www.dell.com/downloads/global...392-Domsch.pdf

  15. #13

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    Just had a quick look on our NG and there's no udev from what I can see... I'll see if there's anything obvious anywhere!

    Cheers

  16. #14

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    574
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    It appears within your Smoothie, the area to dig through is /settings/ethernet/settings and /settings/ethernet/nics/settings-*. The nics/settings-* files seem to have MAC address assigned in there, so that may be somewhere to look.

  17. Thanks to Willott from:

    dhicks (26th November 2009)

  18. #15

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,624
    Thank Post
    1,240
    Thanked 778 Times in 675 Posts
    Rep Power
    235
    Quote Originally Posted by Willott View Post
    the area to dig through is /settings/ethernet/settings and /settings/ethernet/nics/settings-*.
    Thanks. I've been doing lots of Google searching today, trying to figure out what's going on. I found this:

    Smoothwall - School Guardian Eval

    Which came in handy. I've got to the stage where I can re-run setup and get the SmoothWall VM to connect to the network and act as a gateway, I've just got to get it to keep its settings when it reboots. I don't want to have to reconfigure its network from the console every time we switch the machine off.

    --
    David Hicks

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Xen essentials price?
    By j17sparky in forum Thin Client and Virtual Machines
    Replies: 5
    Last Post: 22nd September 2009, 12:17 PM
  2. Xen Desktop
    By imiddleton25 in forum Thin Client and Virtual Machines
    Replies: 0
    Last Post: 29th August 2009, 11:38 AM
  3. Backup Xen VMs
    By cookie_monster in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 28th July 2009, 03:50 PM
  4. [Fedora] Xen
    By Arcath in forum *nix
    Replies: 3
    Last Post: 25th June 2009, 05:47 PM
  5. Replies: 11
    Last Post: 27th January 2009, 07:24 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •