Xen test box

From Cheatsheet

Debian box that will be a test jig for new OEM test boxes. This is a journal of how I'm doing it.

<insert diagram>

Debian keeps rewriting /etc/resolv.conf, so I googled it and found that if I change

 search cox-sd.net

to

 domain cox-sd.net

maybe it'll behave

now I'm going to try to bridge the downstream VM's to eth2, then config the network so that:

• all gateways are x.x.x.1
• all subnets are 255.255.255.0
• all nameservers are upstream ns1.cox-sd.net 209.242.128.100, ...101

    eth0
      |
 DNS1 nameserver
  10.1.10.65
    xenbr0
      |
 upstream monitor
   172.16.1.10
    xenbr1
      |
     eth1
      |
     DUT
    eth0
   untrust
  172.16.1.20
      |
 application configs
     NAT
     eth1
    trust
  192.168.1.10
      |
    eth2
      |
 downstream1
 network monitor
  192.168.1.20
downstream machines use as gateway
   xenbr2
      |
   internally routed with IPtables
 all internal botnet machines
 192.168.1.30-50
    xenbr2

• mail1 open relay postfix