In a kvm/qemu virtualization environment, if I have ASL on the host and on 1 VPS do I need two licenses?
Thanks
Virtualization and pricing
Virtualization and pricing
CentOS 6.9
ASL 4.0.19-37
ASL 4.0.19-37
- mikeshinn
- Atomicorp Staff - Site Admin
- Posts: 4149
- Joined: Thu Feb 07, 2008 7:49 pm
- Location: Chantilly, VA
Re: Virtualization and pricing
Thank you for the question, you are correct. You need two licenses. Two standard ASL licenses. A VPS license will not work for you, KVM is not a VPS technology.
If you are using a VPS technology, like openvz or Virtuzzo you need a VPS license.
If you are using Virtual Machine technology like KVM, QEMU, VMWare, etc. then you need a standard ASL license.
The key difference is that VPS "servers" do not have their own kernel. They share the host servers single kernel. So VPS systems can not install the ASL kernel, and inherit the host servers kernel (and all its vulnerabilities).
Virtual Machines, like vmware, kvm, qemu, vserver, esx, etc. do allow you to install your own kernel, so you can secure the VM against kernel attacks at the virtual server level (even if the host server is not secured against these issues). So if you want to secure the kernel in these virtual machines, you need to get a standard ASL license.
If you are using a VPS technology, like openvz or Virtuzzo you need a VPS license.
If you are using Virtual Machine technology like KVM, QEMU, VMWare, etc. then you need a standard ASL license.
The key difference is that VPS "servers" do not have their own kernel. They share the host servers single kernel. So VPS systems can not install the ASL kernel, and inherit the host servers kernel (and all its vulnerabilities).
Virtual Machines, like vmware, kvm, qemu, vserver, esx, etc. do allow you to install your own kernel, so you can secure the VM against kernel attacks at the virtual server level (even if the host server is not secured against these issues). So if you want to secure the kernel in these virtual machines, you need to get a standard ASL license.
Michael Shinn
Atomicorp - Security For Everyone
Atomicorp - Security For Everyone
Re: Virtualization and pricing
but if the host gets rooted they can enter the VM... so I do need two licenses.mikeshinn wrote:Virtual Machines, like vmware, kvm, qemu, vserver, esx, etc. do allow you to install your own kernel, so you can secure the VM against kernel attacks at the virtual server level (even if the host server is not secured against these issues). So if you want to secure the kernel in these virtual machines, you need to get a standard ASL license.
CentOS 6.9
ASL 4.0.19-37
ASL 4.0.19-37
- mikeshinn
- Atomicorp Staff - Site Admin
- Posts: 4149
- Joined: Thu Feb 07, 2008 7:49 pm
- Location: Chantilly, VA
Re: Virtualization and pricing
Yes, you need two licenses. Two standard ASL licenses. A VPS license will not work on a KVM node.
Michael Shinn
Atomicorp - Security For Everyone
Atomicorp - Security For Everyone