From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ted Hilts Subject: [Fwd: Re: Xend port] -- Thanks Date: Thu, 03 Mar 2005 17:38:40 -0700 Message-ID: <4227AE10.6020703@help-for-you.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="------------000106020706060702000701" Sender: xen-devel-admin@lists.sourceforge.net Errors-To: xen-devel-admin@lists.sourceforge.net List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , List-Archive: To: xen-devel@lists.sourceforge.net List-Id: xen-devel@lists.xenproject.org --------------000106020706060702000701 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Thanks again to all that responded to my information needs regarding Xen. Ted -------- Original Message -------- Subject: Re: [Xen-devel] Xend port Date: Thu, 03 Mar 2005 17:32:40 -0700 From: Ted Hilts To: Rich Persaud , xen-devel@lists.sourceforge.net CC: Mark Williamson , Tim.Deegan@cl.cam.ac.uk References: <42268544.3060201@help-for-you.com> <200503031533.49342.maw48@cl.cam.ac.uk> <42273EE1.1050905@xensource.com> Rich Thanks for your reponse Bye - Thanks -- Ted Rich Persaud wrote: > >>> My next question: >>> What exactly is an HTTP/S server -- apparently it is a requirement for >>> browser administration access to a Xen-based system? Is Apache such a >>> server and if not can it be turned into such a server??? >>> >> >> >> HTTPS? It's a secured version of HTTP. I don't think you shouldn't >> need to install anything extra to make this work - Twisted includes >> its own HTTP server. >> >> (btw, Apache can serve over HTTPS but we don't use it in Xen) >> >> > netstat -anp excerpt of Xen 2.0.4 on CentOS 3.4: > > tcp 0 0 0.0.0.0:8000 > 0.0.0.0:* LISTEN 17856/python tcp > 0 0 0.0.0.0:8001 0.0.0.0:* > LISTEN 17856/python tcp 0 0 > 0.0.0.0:8002 0.0.0.0:* LISTEN > 17855/xfrd tcp 0 0 0.0.0.0:8080 > 0.0.0.0:* LISTEN 17977/python > User manual says this can be configured via > /usr/lib/python2.3/site-packages/xen/sv/params.py. This file does not > exist in the /usr/lib/python*, but /etc/xen/xend-config.sxp includes: > > # Port xend should use for the HTTP interface. > (xend-port 8000) > > Questions: > > 1) xend web interface appears on port 8080 (non SSL). Is the > xend-config.sxp parameter not honored? > > 2) Does Twisted natively support SSL? I found conflicting statements > in my brief research. > > 3) What is listening on ports 8000 and 8001? > > 4) Related subject, how is xfrd (port 8002) secured against malicious > domain transfers? > > > Rich > > > --------------000106020706060702000701 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thanks again to all that responded to my information needs regarding Xen= .

=C2=A0Ted

-------- Original Message --------
Subject: = Re: [Xen-devel] Xend port
Date: Thu, 03 Mar 2005 17:32:40 -0700
From: Ted Hilts <thilts@help-for-you.com>
To: Rich Persaud <rich.p@xensource.com>, xen= -devel@lists.sourceforge.net
CC: Mark Williamson <maw48@cl.cam.ac.uk>, Tim.Deegan@c= l.cam.ac.uk
Reference= s: <42268544.3060201@help-for-you.com> <200503031533.49342.maw48@cl.cam.ac.uk> <42273EE1.1050905@xensource.com>


Rich

Thanks for your reponse

Bye - Thanks -- Ted

Rich Persaud wrote:
=20
=20
=20
My next question:
What exactly is an HTTP/S server -- apparently it is a requirement for <= br> browser administration access to a Xen-based system? Is Apache such a server and if not can it be turned into such a server???
=C2=A0=C2=A0

HTTPS?=C2=A0 It's a secured version of HTTP.=C2=A0 I don't think you sho= uldn't need=20 to install anything extra to make this work - Twisted includes its own H= TTP=20 server.

(btw, Apache can serve over HTTPS but we don't use it in Xen)
=C2=A0

netstat -anp=C2=A0 excerpt of Xen 2.0.4 on CentOS 3.4:

=C2=A0tcp=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 0 0.0.0.0:8000=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0.0.0.0:*=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=20 LISTEN=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 17856/python=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 =C2=A0tcp=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 0 0.0.0.0:8001=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=20 0.0.0.0:*=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 LISTEN=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 17856/python=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0tcp=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0 0.0.0.0:8002=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0.0.0.0:*=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= LISTEN=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 17855/xfrd=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 =C2=A0tcp=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 0 0.0.0.0:8080=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0.0.0.0:*=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=20 LISTEN=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 17977/python=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0
User manual says this can be configured via /usr/lib/python2.3/site-pac= kages/xen/sv/params.py.=20 This file does not exist in the /usr/lib/python*, but /etc/xen/xend-conf= ig.sxp=20 includes:

=C2=A0# Port xend should use for the HTTP interface.
=C2=A0(xend-port=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 8000) <= br>
Questions:

1) xend web interface appears on port 8080 (non SSL).=C2=A0 Is the xend= -config.sxp=20 parameter not honored?

2) Does Twisted natively support SSL? I found conflicting statements in my brief research.

3) What is listening on ports 8000 and 8001?

4) Related subject, how is xfrd (port 8002) secured against malicious d= omain=20 transfers?


Rich




=20 --------------000106020706060702000701-- ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click