deploy multiple vnets with VIMAGE/VNET + Production Ready?

Michael Grimm trashcan at ellael.org
Fri Jun 3 09:23:40 UTC 2016


On 2016-06-03 0:05, Ernie Luzar wrote:
> Michael Grimm wrote:

>> I switched to VNET+epair/if_bridge jails starting 10.2-STABLE,
>> now 10.3-STABLE, and haven't seen any issues, sofar.

> You left out whether you had to compile the kernel with the vimage
> option or whether vimage was already included in the kernel?

Obviously, I had had to compile a custom kernel because I am running 
10.x-STABLE. And, because I am using IPSec, I have to do so anyway:

      include    GENERIC        # include GENERIC definitions, first
      ident      CUSTOM         # custom kernel name
      cpu        HAMMER         # amd64 and intel 64bit cpus

      device     crypto         # IPsec depends on this
      options    IPSEC          # IP security
      options    IPSEC_NAT_T    # IP security NAT-T in transport mode

      options    VIMAGE         # network virtualization

Regards,
Michael


More information about the freebsd-jail mailing list