From: Paul Sladen (vserver_at_paul.sladen.org)
Date: Mon 04 Nov 2002 - 11:48:55 GMT
On 4 Nov 2002, djp_at_comm.it wrote:
> Nowadays, software writers tend to think that the loopback device is a
> "safe" way for inter-process communication.
Unfortunately until we start doing some filtering on it, it is currently
acting like a shared [non-switched] ethernet segment...
> I'm wondering how easy would it be to redirect binds and connections to
> the localhost (127.0.0.1) to the server IP address instead
This is what happens anyway.
> (or, alternative, to have a per-context localhost address which will
> allow a seamless operation of such software).
Jacques is currently writing code so that binding to the default address
within a vserver binds to all the IP addresses assigned to the vserver
rather than the first one (this hasn't been done before because it is a
technical pain).
This will open up the possibility of having a local-loopback in the form of
`127.1.0.ctx' with modifications to the mangling done above so that we still
appear to be talking to `127.0.0.1'.
-Paul
-- Nottingham, GB