Date: Thu, 29 Jan 2009 08:56:12 +0000 (GMT) From: Robert Watson <rwatson@FreeBSD.org> To: Dmitry Morozovsky <marck@rinet.ru> Cc: freebsd-stable@FreeBSD.org Subject: Re: jail: external and localhost distinction Message-ID: <alpine.BSF.2.00.0901290855010.70708@fledge.watson.org> In-Reply-To: <alpine.BSF.2.00.0901290021000.91263@woozle.rinet.ru> References: <alpine.BSF.2.00.0901290021000.91263@woozle.rinet.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 29 Jan 2009, Dmitry Morozovsky wrote: > am I right concluding that under FreeBSD jail there is no way to attach two > processes to the same port of external interface address and localhost? > > I tried to move rather standard two-tier nginx(ip:80)+apache(127.1:80) > scheme into a jail and on apache start got > > [Thu Jan 29 00:09:32 2009] [crit] (48)Address already in use: make_sock: > could not bind to address 127.0.0.1 port 80 > > (this is under RELENG_7 if it's relevant) > > Any thoughts? Thanks in advance. The way Jail is implemented is that the jail IP is silently substituted for the loopback IP is used. This has some downsides, and this is one of them. The virtual network stack (VIMAGE) project for FreeBSD 8.0 is intended to address this, among many other things, by providing full virtualization of all network stack data structures for jails. Robert N M Watson Computer Laboratory University of Cambridge
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.0901290855010.70708>