From mboxrd@z Thu Jan 1 00:00:00 1970 From: Rich Persaud Subject: Re: Xend port Date: Thu, 03 Mar 2005 11:44:17 -0500 Message-ID: <42273EE1.1050905@xensource.com> References: <42268544.3060201@help-for-you.com> <200503031533.49342.maw48@cl.cam.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit In-Reply-To: <200503031533.49342.maw48@cl.cam.ac.uk> Sender: xen-devel-admin@lists.sourceforge.net Errors-To: xen-devel-admin@lists.sourceforge.net List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , List-Archive: To: Mark Williamson Cc: xen-devel@lists.sourceforge.net, Ted Hilts , Tim.Deegan@cl.cam.ac.uk List-Id: xen-devel@lists.xenproject.org >>My next question: >>What exactly is an HTTP/S server -- apparently it is a requirement for >>browser administration access to a Xen-based system? Is Apache such a >>server and if not can it be turned into such a server??? >> >> > >HTTPS? It's a secured version of HTTP. I don't think you shouldn't need to >install anything extra to make this work - Twisted includes its own HTTP >server. > >(btw, Apache can serve over HTTPS but we don't use it in Xen) > > netstat -anp excerpt of Xen 2.0.4 on CentOS 3.4: tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 17856/python tcp 0 0 0.0.0.0:8001 0.0.0.0:* LISTEN 17856/python tcp 0 0 0.0.0.0:8002 0.0.0.0:* LISTEN 17855/xfrd tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 17977/python User manual says this can be configured via /usr/lib/python2.3/site-packages/xen/sv/params.py. This file does not exist in the /usr/lib/python*, but /etc/xen/xend-config.sxp includes: # Port xend should use for the HTTP interface. (xend-port 8000) Questions: 1) xend web interface appears on port 8080 (non SSL). Is the xend-config.sxp parameter not honored? 2) Does Twisted natively support SSL? I found conflicting statements in my brief research. 3) What is listening on ports 8000 and 8001? 4) Related subject, how is xfrd (port 8002) secured against malicious domain transfers? Rich ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click