I've used UML before to isolate services. Ever tried breaking out of a chroot jail? This is even better. Ever tried breaking a system where the only thing available is a readonly root filesystem with a single daemon and a few required utils? Gotta love UML :)

--MonMotha

Warren Togami wrote:
----- Original Message -----
From: "MonMotha" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 02, 2002 4:40 PM
Subject: Re: [luau] INFO: Heavy duty storage needs



I'm glad someone liked my explanation :)


I recently built a nice dualie AMD 1.4GHz, 2GB DDR, with 2xU160 36GB
15kRPM hard drives.  It's (among other things) a proxy server and
mailer.  Proxying, especially when also doing mail, involves some
bandwidth (but not excessive, it's only a 1gbit uplink to the LAN), but
it also involves a lot of seeking.  The tagged command queuing and
reduced seek times of the SCSI drives are a big advantage on this puppy.



Have you considered vserver for that machine?  It would greatly enhance
security and flexibility... and I look forward to seeing what kind of neat
iptables tricks you can do with multiple vservers (and perhaps multiple IP
aliases).

http://www.solucorp.qc.ca/miscprj/s_context.hc

_______________________________________________
LUAU mailing list
[EMAIL PROTECTED]
http://videl.ics.hawaii.edu/mailman/listinfo/luau




Reply via email to