[kata-dev] vsock & network namespaces in Kata
Stefano Garzarella
sgarzare at redhat.com
Wed Dec 4 10:32:57 UTC 2019
Hi folks,
I'm working on vsock on Linux and I'm adding the network namespace
support on it[1].
The main changes are the following:
- Guest: can talk with the host packets (send and receive packets) in
the default init_netns (maybe we can make it configurable)
- Host: can talk with the guest only in the same netns where the VMM is
running (e.g. if we start qemu from ns1, all packets are received only
in ns1)
- Host: assign the same CID of VMs running in different network
namespaces
- Nested VMs (available from Linux 5.5): isolate host applications from
guest applications
IIUC you have a runtime running in the host that communicates using
vsock with an agent in the guest.
I have few questions:
1. Is the VMM (e.g. QEMU) running in a network namespace?
2. Is the host application, that use vsock to communicate with the
guest, running in the same network namespace?
3. Is the agent in the guest running outside a netns (default init_netns)?
If you have any other suggestions, I'd be happy to hear them.
Thanks,
Stefano
More information about the kata-dev
mailing list