Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965202AbWEKIFD (ORCPT ); Thu, 11 May 2006 04:05:03 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S965204AbWEKIFD (ORCPT ); Thu, 11 May 2006 04:05:03 -0400 Received: from rhun.apana.org.au ([64.62.148.172]:23047 "EHLO arnor.apana.org.au") by vger.kernel.org with ESMTP id S965202AbWEKIFB (ORCPT ); Thu, 11 May 2006 04:05:01 -0400 Date: Thu, 11 May 2006 18:04:43 +1000 To: Keir Fraser Cc: xen-devel@lists.xensource.com, ian.pratt@xensource.com, rdreier@cisco.com, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, Andi Kleen , virtualization@lists.osdl.org, chrisw@sous-sol.org, shemminger@osdl.org Subject: Re: [RFC PATCH 34/35] Add the Xen virtual network device driver. Message-ID: <20060511080443.GB29704@gondor.apana.org.au> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.9i From: Herbert Xu Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1202 Lines: 27 On Thu, May 11, 2006 at 08:49:04AM +0100, Keir Fraser wrote: > > The alternatives are unattractive: > 1. We have no good way to distinguish interrupts caused by packets > from local VMs versus packets from remote hosts. Both get muxed on the > same virtual interface. > 2. An entropy front/back is tricky -- how do we decide how much > entropy to pull from domain0? How much should domain0 be prepared to > give other domains? How easy is it to DoS domain0 by draining its > entropy pool? Yuk. IMHO there just isn't enough real entropy to go around in one physical machine without a proper HRNG. So either use urandom in all the guests or for those that really have to use /dev/random, install a hardware RNG (or wait for it :). Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/