Re: IPFilter and Xen

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Wed, Mar 10, 2010 at 05:33:37PM +0000, Emmanuel Dreyfus wrote:
> Hello
> 
> Is there any known problem with IPfilter and Xen?

Not that I know. I have a setup of 2 (somewhat redundant) servers
with ipfilter in a domU (acting as a router for the other domUs) and
the dom0 (filtering on the bridges). No issues so far

> I have trouble 
> on a filtering gateway, with TCP connexions that hang for minutes. 
> This happen both with "flags S/SA keep state keep frags" and without. 

But I don't use much "keep state" (actually I avoids it as much as possible).

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--