VM and jail bridged network virtual interface

Hello,

I recently brought online my first FreebSD bhyvevm running Linux in and a VLAN jail, both use bridged networking. It works great. One question that I have is that the sources I followed to setup this up lead me down a path where the bhyve VM is using tap device while the jail is using an epair device.

I want to understand why each of these deployments uses a different virtual network interface stack. What's the difference between tap and epair what makes each more suited for the VM / jail deployment?
 
If you pass a tap interface to a vnet jail the interface will disappear from the host and the bridge and the jail network will be isolated. The epair interface instead create 2 devices, one for the host and one for the jail, so when you pass one epair to the jail the other stay on the bridge and the jail can comunicate with the outside network
 
Back
Top