| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="security-networking">
|
|---|
| 4 | <title>Networking</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>
|
|---|
| 8 | The default networking mode for VMs is NAT which means that
|
|---|
| 9 | the VM acts like a computer behind a router, see
|
|---|
| 10 | <xref href="network_nat.dita">Network Address Translation (NAT)</xref>. The guest is part of a private
|
|---|
| 11 | subnet belonging to this VM and the guest IP is not visible
|
|---|
| 12 | from the outside. This networking mode works without any
|
|---|
| 13 | additional setup and is sufficient for many purposes. Keep in
|
|---|
| 14 | mind that NAT allows access to the host operating system's
|
|---|
| 15 | loopback interface.
|
|---|
| 16 | </p>
|
|---|
| 17 | <p>
|
|---|
| 18 | If bridged networking is used, the VM acts like a computer
|
|---|
| 19 | inside the same network as the host, see
|
|---|
| 20 | <xref href="network_bridged.dita">Bridged Networking</xref>. In this case, the guest has
|
|---|
| 21 | the same network access as the host and a firewall might be
|
|---|
| 22 | necessary to protect other computers on the subnet from a
|
|---|
| 23 | potential malicious guest as well as to protect the guest from
|
|---|
| 24 | a direct access from other computers. In some cases it is
|
|---|
| 25 | worth considering using a forwarding rule for a specific port
|
|---|
| 26 | in NAT mode instead of using bridged networking.
|
|---|
| 27 | </p>
|
|---|
| 28 | <p>
|
|---|
| 29 | Some setups do not require a VM to be connected to the public
|
|---|
| 30 | network at all. Internal networking, see
|
|---|
| 31 | <xref href="network_internal.dita">Internal Networking</xref>, or host-only networking,
|
|---|
| 32 | see <xref href="network_hostonly.dita">Host-Only Networking</xref>, are often sufficient
|
|---|
| 33 | to connect VMs among each other or to connect VMs only with
|
|---|
| 34 | the host but not with the public network.
|
|---|
| 35 | </p>
|
|---|
| 36 | </body>
|
|---|
| 37 |
|
|---|
| 38 | </topic>
|
|---|
