[nzlug] Server Consolidation

[Howard]

>>> I was wondering if anyone knew of a decent tutorial on running IPCop
>>> within a virtual machine on the file server so that I can reduce my
>>> electricity bill and the noise in my room and anything relating to the
>>> security of doing such a thing. I've noticed in the list of packages
>>> IPCop now has vmware-tools so I'm pretty sure it can be done securely.

>> Why not having one server that will run a Xen system and set it up
>> using NAT?  The dom0 is purely running as a firewall using IPTables
>> (or probably IPKungFu) then your domU will be running your needed
>> network services?

on 14/11/2007 3:06 p.m. Daniel Lawson wrote:
> Or just add an iptables firewall to your existing Ubuntu box... I use 
> xen all the time, and am very familiar with virtualisation in general, 
> however this feels a bit much like overcomplicating things :)

IPCop does a lot more than just manage firewalling for one box though. 
    Dumping it for one iptables setup would depend on how many IPCop 
features Nevyn is using or cares about (he'd have to set these features 
up under Ubuntu), and whether he has another router to use for the ISP 
connection (My ADSL card is in the IPCop box).  Although one hardware 
firewall to manage 2 machines can probably be simplified...!

I quite like the sound of using a Virtualised IPCop solution as I am in 
a similar boat with regard to power consumption (albeit a few more boxes 
running...).  I've been wanting to learn about Xen & Virtualisation for 
a while.

cheers
H