Subscribe to the RSS Feed


VIMAGE - Better virtualization in FreeBSD 8

Now that FreeBSD 8 is out, among many changes we can find enhancements in the field of virtualization as well. A newly developed virtualization container called VIMAGE has been implemented to enable virtualization of the FreeBSD network stack.

As you may know previous releases of FreeBSD had support only for jails with IP addresses of the main network stack; meaning once you configured IP/IPv6 addresses on your host system, a subset of those addresses could be associated to each one of your jails. As simple as it sounds, it actually doesn’t let you perform several networking related tasks inside of a jail, and you couldn’t separate your jails from each other with a firewall as there were no real interfaces present in your system.

With VIMAGE you have a jail with full instance of the host’s networking stack, including loopback interface, routing tables, etc. Network interfaces created on the host system can be moved to any VIMAGE jail to enable its connection to the outside world with a new option of ifconfig called “vnet”.

vnet jail
Move the interface to the jail , specified by name or JID. If the jail has a virtual network stack, the interface will disap- pear from the current environment and become visible to the jail.

Note: Option “-vnet” does the opposite.

As you might not have as many network interfaces as jails, you might need some workarounds to tunnel network traffic between two interfaces of your system.

Forget TUN/TAP and VPNs. FreeBSD 8 has a special network device called epair , which lets you create a pair of interconnected ethernet interfaces. If you move one of them to a VIMAGE jail you are basicly done. Feel free to bridge them or use VLANs, they will still work. I don’t know about the overhead of epair, but if all you care about is security, this might be the best choice for you on FreeBSD.

To enable VIMAGE you have to add “option VIMAGE” to your kernel configuration file and recompile/reinstall it.

Posted 2009/11/27 22:06 by jos


  1. Dec 3, 09:27 PM

    Eric Says:

    Great post – I am having some issues with a similar setup – I have searched all over but this is a fairly new topic. If you think you might be able to offer some insight – please see this post!

    I greatly appreciate the help!

  2. May 13, 05:21 AM

    best Nikon sunglasses Says:

    Thank you for sharing with me. Those are very beautiful and i hope that you continue to make more of them.

  3. May 20, 05:13 AM

    women's Mont Blanc handbags Says:

    This article is very good, I like,
    thank you, I’m more understanding

  4. May 23, 04:14 AM

    SGPG replica handbags Says:

    Thank you! I LOVE this. I made one. I use it all the time. I will be posting a picture of mine and providing a link on my blog.

  5. Feb 17, 09:05 AM

    Elvie Deczky Says:

    Good write-up. I certainly appreciate this site. Stick with it.

  6. Mar 12, 08:49 AM Says:

    Valuable info. Lucky me I found your website unintentionally, and I’m stunned why this accident didn’t
    happened earlier! I bookmarked it.

  7. May 21, 02:43 PM

    farrah Says:

    I really like your blog.. very nice colors & theme.
    Did you create this website yourself or did you hire someone to do it for you?
    Plz answer back as I’m looking to design my own blog and would like to find out where u got this from. thanks a lot

  8. Oct 25, 01:45 PM

    kelly brook nude Says:

    What’s up to all, the contents existing at this web
    page are genuinely awesome for people experience, well,
    keep up the good work fellows.

  9. May 17, 09:38 AM Says:

    I woyld like to thank yyou for the efforts you have put in
    enning this site. I aam hoping to vjew the same high-grade blog posts from you in
    the future as well. In truth, your creative writing abilities hass encouraged me tto get my owwn website nnow ;)

  10. Jul 13, 08:14 PM

    how to hypnotise Says:

    For instance overeating, over spending and excessive drinking may provide joy in the short
    term but have deleterious effects in the long run. When all these suggestions are embedded in the subconscious mind, everything else inside the individual will
    follow. Also, you want your subject reclined, but not lying down, which will cause them
    to fall asleep and they will be unable to absorb your suggestions.

  11. Jul 20, 01:56 AM

    garcinia cambogia reviews livewell Says:

    garcinia cambogia reviews best My coder is trying to convince me to wryucq move to .net from PHP.
    I have always disliked the idea because of the costs.

    But he’s tryiong none the less. I’ve been using Movable-type on a
    variety of websites for about a year and am nervous about switching to another platform.
    I have heard very good things about
    Is there a way I can transfer all my wordpress content into it?
    Any help would be really appreciated! garcinia cambogia kokum

  12. Jan 13, 10:53 PM

    พลอยแท้ Says:

    Great post but I was wanting to know if you could write a
    litte more on this topic? I’d be very thankful
    if you could elaborate a little bit further.
    Appreciate it!

  13. Jan 13, 11:56 PM

    bail bond Irvine| bail bond Laguna Beach| bail bond Dana Point| bail bond Murrieta| bail bond Lake Elsinore|bail bond Temecula| bail bond Newport Beach| bail bond Seal Beach| bail bond Orange| bail bond Costa Mesa| bail bond Anaheim| bail bond Santa Ana| Says:

    A person can give the full amount of the bond, and yes it will be refunded back after judgment is pronounced.
    In those cases when a defendant cannot make bail, they’re able to make use of
    bail bondsman or agency to write bail. It should also be noted that
    police discovered four Filipino workers at Alayban’s
    condo, who left voluntarily with them.

  14. Feb 20, 02:02 PM

    financing options Says:

    There are occurrences wherein a person might commit an act of violence
    or turn to crime that will laznd himm in jail. Most conveniently
    the offices are situated near the Orange County
    jails. Their fees will be the same from defendant to defendant, however, prfoviding payment plans and options will likely
    be necessary to be able to fill involve the client.

  15. Mar 26, 11:00 PM

    easy bail Says:

    A skilled and knowledgeable criminal attorney will direct you
    more easily through the process and provide the best opportunity to avoid jail, large
    fines as well as a criminal record. Cole,wearing the Starr Wars mask,
    was approached through the trooper and told to get out
    of the road. Street gangs, Prison gangs, and outlaw motorcycle gangs (OMGs) disperse unlawful drugs at bboth wholesale and retail levels
    from thee Houston area.

Leave a Comment

Add your comment. Preview then Submit.


Textile Help