From mboxrd@z Thu Jan  1 00:00:00 1970
From: Ian Campbell <ian.campbell@citrix.com>
Subject: Re: Is data transfer encrypted in live migration?
Date: Tue, 5 May 2015 10:33:51 +0100
Message-ID: <1430818431.2660.14.camel@citrix.com>
References: <CAEZiW-rTaYwJZK6s5Nf3OyfFp8v_XZg-YrkpkTfrtMU3CYDi-A@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <xen-devel-bounces@lists.xen.org>
In-Reply-To: <CAEZiW-rTaYwJZK6s5Nf3OyfFp8v_XZg-YrkpkTfrtMU3CYDi-A@mail.gmail.com>
List-Unsubscribe: <http://lists.xen.org/cgi-bin/mailman/options/xen-devel>,
	<mailto:xen-devel-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xen.org>
List-Help: <mailto:xen-devel-request@lists.xen.org?subject=help>
List-Subscribe: <http://lists.xen.org/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xen.org?subject=subscribe>
Sender: xen-devel-bounces@lists.xen.org
Errors-To: xen-devel-bounces@lists.xen.org
To: Alireza Vaezi <s.alireza.v@gmail.com>
Cc: xen-devel@lists.xen.org
List-Id: xen-devel@lists.xenproject.org

On Sun, 2015-05-03 at 14:00 +0430, Alireza Vaezi wrote:
> Hi
> 
> does xen establish a secure (encrypted) channel via ssh to transfer
> data in live migration?

This is a function of the toolstack in use. For the xl toolstack the
answer is yes, everything (including the guest memory contents) is
transmitted over the encrypted ssh tunnel.

I don't know what libvirt does (might be optional depending on the URL
used?).

Ian.

> 
> 
> I'm using xen 4.4 hypervisor and when trying to live migrate a domU
> guest to another physical machine, it establishes ssh connection to
> the destination. does it mean that the memory content of the VM
> transfered to the destination in live migration is encrypted?
> 
> 
> 
> S.Alireza.V
> 
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xen.org
> http://lists.xen.org/xen-devel