From xen-devel-bounces@lists.xen.org Mon Sep 16 17:10:51 2013 Received: (at maildrop) by bugs.xenproject.org; 16 Sep 2013 16:10:51 +0000 Received: from lists.xen.org ([50.57.142.19]) by bugs.xenproject.org with esmtp (Exim 4.80) (envelope-from ) id 1VLbNz-0005pt-OT for xen-devel-maildrop-Eithu9ie@bugs.xenproject.org; Mon, 16 Sep 2013 17:10:51 +0100 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1VLbLP-0007F2-Mf; Mon, 16 Sep 2013 16:08:11 +0000 Received: from mail6.bemta4.messagelabs.com ([85.158.143.247]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1VLbLN-0007EL-Uj for xen-devel@lists.xen.org; Mon, 16 Sep 2013 16:08:10 +0000 Received: from [85.158.143.35:42688] by server-2.bemta-4.messagelabs.com id 1B/51-26052-9EC27325; Mon, 16 Sep 2013 16:08:09 +0000 X-Env-Sender: George.Dunlap@eu.citrix.com X-Msg-Ref: server-3.tower-21.messagelabs.com!1379347687!4501930!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n X-StarScan-Received: X-StarScan-Version: 6.9.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 5161 invoked from network); 16 Sep 2013 16:08:08 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-3.tower-21.messagelabs.com with RC4-SHA encrypted SMTP; 16 Sep 2013 16:08:08 -0000 X-IronPort-AV: E=Sophos;i="4.90,916,1371081600"; d="scan'208";a="54347254" Received: from accessns.citrite.net (HELO FTLPEX01CL03.citrite.net) ([10.9.154.239]) by FTLPIPO01.CITRIX.COM with ESMTP; 16 Sep 2013 16:08:07 +0000 Received: from ukmail1.uk.xensource.com (10.80.16.128) by smtprelay.citrix.com (10.13.107.80) with Microsoft SMTP Server id 14.2.342.4; Mon, 16 Sep 2013 12:08:06 -0400 Received: from elijah.uk.xensource.com ([10.80.2.24]) by ukmail1.uk.xensource.com with esmtp (Exim 4.69) (envelope-from ) id 1VLbLK-00064p-J3; Mon, 16 Sep 2013 17:08:06 +0100 Message-ID: <52372CDB.3000409@eu.citrix.com> Date: Mon, 16 Sep 2013 17:07:55 +0100 From: George Dunlap User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130804 Thunderbird/17.0.8 MIME-Version: 1.0 To: Zhigang Wang References: <523337AA.5080103@oracle.com> <5237291C.9090100@oracle.com> <52372C40.1090704@eu.citrix.com> In-Reply-To: <52372C40.1090704@eu.citrix.com> X-DLP: MIA1 Cc: Ian Jackson , xen-devel Subject: Re: [Xen-devel] Suggestion for merging xl save/restore/migrate/migrate-receive X-BeenThere: xen-devel@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org On 16/09/13 17:05, George Dunlap wrote: >> ========== >> XL Migrate >> ========== >> >> :Date: 2013-09-16 >> >> Current Status >> ============== >> >> * xl migrate leverages ssh/sshd:: >> >> xl migrate >> >> * In order to migrate a VM without user interactive, we have to >> configure ssh >> keys for all Servers in a pool. Key management with dynamic Server >> Pools is >> error prone. >> * In certain cases, customers need non-ssl migrate, which greatly >> improves the >> migration speed. There's no way to do it with ssh. > > Just to make sure I understand correctly then: you're throwing > authentication out the window, assuming that the host network is > entirely trusted -- even when using ssl? FWIW, I think XenServer (via xapi) manage to do the host ssh keys for a pool all right. But having an option to do the migration unencrypted, if you trust your network, seems like it might be a worthwhile option. -George _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel