Is data transfer encrypted in live migration?

Is data transfer encrypted in live migration?

[Alireza Vaezi]

[-- Attachment #1.1: Type: text/plain, Size: 372 bytes --]

Hi
does xen establish a secure (encrypted) channel via ssh to transfer data in
live migration?

I'm using xen 4.4 hypervisor and when trying to live migrate a domU guest
to another physical machine, it establishes ssh connection to the
destination. does it mean that the memory content of the VM transfered to
the destination in live migration is encrypted?


S.Alireza.V

[-- Attachment #1.2: Type: text/html, Size: 556 bytes --]

[-- Attachment #2: Type: text/plain, Size: 126 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel

Re: Is data transfer encrypted in live migration?

[Ian Campbell]

On Sun, 2015-05-03 at 14:00 +0430, Alireza Vaezi wrote:
> Hi
> 
> does xen establish a secure (encrypted) channel via ssh to transfer
> data in live migration?

This is a function of the toolstack in use. For the xl toolstack the
answer is yes, everything (including the guest memory contents) is
transmitted over the encrypted ssh tunnel.

I don't know what libvirt does (might be optional depending on the URL
used?).

Ian.

> 
> 
> I'm using xen 4.4 hypervisor and when trying to live migrate a domU
> guest to another physical machine, it establishes ssh connection to
> the destination. does it mean that the memory content of the VM
> transfered to the destination in live migration is encrypted?
> 
> 
> 
> S.Alireza.V
> 
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xen.org
> http://lists.xen.org/xen-devel

Re: Is data transfer encrypted in live migration?

[Ian Campbell]

On Tue, 2015-05-05 at 10:33 +0100, Ian Campbell wrote:
> On Sun, 2015-05-03 at 14:00 +0430, Alireza Vaezi wrote:
> > Hi
> > 
> > does xen establish a secure (encrypted) channel via ssh to transfer
> > data in live migration?

BTW, this is really a user support question, please you xen-users and
not the development list for this sort of thing.

Ian.