Say I have a global zone with IP address on network A and a local zone
with IP address on network B. Each of them is using its own interface and
the packets between those two networks are not routed.
However, local zone needs some services on network A. I have two use
1. The mail relay is on network A. Local zone might need to send a mail
occasinally, so it would be nice if it could connect to the sendmail
listening only on the global zone's 127.0.0.1 which would then send the
mail to the real relay. (The real relay doesn't accept anything from
network B, even if it somehow gets routed.)
2. Some network service (a database, for example) on network A needs to be
accessed from the local zone, without any processing by programs in the
Both of these cases could be implemented with a little programming. I
could write a daemon which would listen for TCP connections in the local
zone and transfer the data via Unix domain socket to the daemon in the
global zone which would then transfer the data to the appropriate IP
addresses reachable from the global zone.
I was wondering if there's anything in the kernel which can already do
that for me and just needs to be configured.
.-. .-. Yes, I am an agent of Satan, but my duties are largely
(_ \ / _) ceremonial.