Xen.org is evaluating different designs and technologies to enforce network isolation inside its Xen Cloud Platform (XCP). One of them is the use of GRE tunnels.
Such implementation, which would rely on the Open vSwitch component introduced in version 0.5, would be exposed in the XenAPI.
The tentative design is detailed here.