Network Issues

Rudi Swennen

Member
May 14, 2014
24
0
21
Heverlee, Belgium
Hello Forum,

I have following Proxmox VE:
proxmox-ve-2.6.32: 3.2-136 (running kernel: 2.6.32-32-pve) pve-manager: 3.3-1 (running version: 3.3-1/a06c9f73) pve-kernel-2.6.32-32-pve: 2.6.32-136 lvm2: 2.02.98-pve4 clvm: 2.02.98-pve4 corosync-pve: 1.4.7-1 openais-pve: 1.1.4-3 libqb0: 0.11.1-2 redhat-cluster-pve: 3.2.0-2 resource-agents-pve: 3.9.2-4 fence-agents-pve: 4.0.10-1 pve-cluster: 3.0-15 qemu-server: 3.1-34 pve-firmware: 1.1-3 libpve-common-perl: 3.0-19 libpve-access-control: 3.0-15 libpve-storage-perl: 3.0-23 pve-libspice-server1: 0.12.4-3 vncterm: 1.1-8 vzctl: 4.0-1pve6 vzprocps: 2.0.11-2 vzquota: 3.1-2 pve-qemu-kvm: 2.1-5 ksm-control-daemon: 1.1-1 glusterfs-client: 3.5.2-1


The iptable (NAT) on the openVZ containers is not accepted/running anymore.
So iptables -t nat -vnL gives in the OpenVZ container no error, but the NAT is not functioning.
The same servers installed yesterday had no issue and iptables/NAT is working.
So This command isn't working anymore (I think):
vzctl set 14XXXXXXX --iptables 'iptable_nat iptable_filter iptable_mangle ip_conntrack ipt_conntrack ipt_REDIRECT ipt_REJECT ipt_multiport ipt_helper ipt_LOG ipt_state' --save

I have so the following issue on the nodes. When I do dmesg I get following notifications. (See log below).

Kind regards,

Rudi

------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 2370109) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe679 ]---
Tainting kernel with flag 0x9
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
device tap144986602i0 entered promiscuous mode
vmbr1343: port 3(tap144986602i0) entering forwarding state
vmbr1343: port 3(tap144986602i0) entering disabled state
CT: 137427681: started
device veth137427681.0 entered promiscuous mode
vmbr950: port 247(veth137427681.0) entering forwarding state
device veth137427681.1 entered promiscuous mode
vmbr1344: port 2(veth137427681.1) entering forwarding state
vmbr1344: port 2(veth137427681.1) entering disabled state
vmbr950: port 247(veth137427681.0) entering disabled state
device veth137427681.0 left promiscuous mode
vmbr950: port 247(veth137427681.0) entering disabled state
device veth137427681.1 left promiscuous mode
vmbr1344: port 2(veth137427681.1) entering disabled state
CT: 137427681: stopped
CT: 137427681: started
device veth137427681.0 entered promiscuous mode
vmbr950: port 247(veth137427681.0) entering forwarding state
device veth137427681.1 entered promiscuous mode
vmbr1344: port 2(veth137427681.1) entering forwarding state
eth1: no IPv6 routers present
eth0: no IPv6 routers present
device tap137427602i0 entered promiscuous mode
vmbr1344: port 3(tap137427602i0) entering forwarding state
vmbr1344: port 3(tap137427602i0) entering disabled state
CT: 145757381: started
device veth145757381.0 entered promiscuous mode
vmbr950: port 208(veth145757381.0) entering forwarding state
device veth145757381.1 entered promiscuous mode
vmbr1305: port 2(veth145757381.1) entering forwarding state
eth1: no IPv6 routers present
eth0: no IPv6 routers present
__ratelimit: 65 callbacks suppressed
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
__ratelimit: 47 callbacks suppressed
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 3495058) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe67a ]---
Tainting kernel with flag 0x9
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
device tap130589802i0 entered promiscuous mode
vmbr1345: port 3(tap130589802i0) entering forwarding state
vmbr1345: port 3(tap130589802i0) entering disabled state
CT: 143132181: started
device veth143132181.0 entered promiscuous mode
vmbr950: port 249(veth143132181.0) entering forwarding state
device veth143132181.1 entered promiscuous mode
vmbr1346: port 2(veth143132181.1) entering forwarding state
vmbr1346: port 2(veth143132181.1) entering disabled state
vmbr950: port 249(veth143132181.0) entering disabled state
device veth143132181.0 left promiscuous mode
vmbr950: port 249(veth143132181.0) entering disabled state
device veth143132181.1 left promiscuous mode
vmbr1346: port 2(veth143132181.1) entering disabled state
CT: 143132181: stopped
CT: 143132181: started
device veth143132181.0 entered promiscuous mode
vmbr950: port 249(veth143132181.0) entering forwarding state
device veth143132181.1 entered promiscuous mode
vmbr1346: port 2(veth143132181.1) entering forwarding state
eth0: no IPv6 routers present
eth1: no IPv6 routers present
------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 5729773) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff81086994>] ? try_to_del_timer_sync+0x84/0xe0
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe67b ]---
Tainting kernel with flag 0x9
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff81086994>] ? try_to_del_timer_sync+0x84/0xe0
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
device tap143132102i0 entered promiscuous mode
vmbr1346: port 3(tap143132102i0) entering forwarding state
vmbr1346: port 3(tap143132102i0) entering disabled state
CT: 145762081: started
device veth145762081.0 entered promiscuous mode
vmbr950: port 250(veth145762081.0) entering forwarding state
device veth145762081.1 entered promiscuous mode
vmbr1347: port 2(veth145762081.1) entering forwarding state
vmbr1347: port 2(veth145762081.1) entering disabled state
vmbr950: port 250(veth145762081.0) entering disabled state
device veth145762081.0 left promiscuous mode
vmbr950: port 250(veth145762081.0) entering disabled state
device veth145762081.1 left promiscuous mode
vmbr1347: port 2(veth145762081.1) entering disabled state
CT: 145762081: stopped
CT: 145762081: started
device veth145762081.0 entered promiscuous mode
vmbr950: port 250(veth145762081.0) entering forwarding state
device veth145762081.1 entered promiscuous mode
vmbr1347: port 2(veth145762081.1) entering forwarding state
eth0: no IPv6 routers present
eth1: no IPv6 routers present
------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 507022) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 277, comm: kswapd0 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe67c ]---
Tainting kernel with flag 0x9
Pid: 277, comm: kswapd0 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 2637523) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff81086994>] ? try_to_del_timer_sync+0x84/0xe0
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe67d ]---
Tainting kernel with flag 0x9
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff81086994>] ? try_to_del_timer_sync+0x84/0xe0
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
device tap145762002i0 entered promiscuous mode
vmbr1347: port 3(tap145762002i0) entering forwarding state
vmbr1347: port 3(tap145762002i0) entering disabled state
CT: 136859581: started
device veth136859581.0 entered promiscuous mode
vmbr950: port 251(veth136859581.0) entering forwarding state
device veth136859581.1 entered promiscuous mode
vmbr1348: port 2(veth136859581.1) entering forwarding state
vmbr1348: port 2(veth136859581.1) entering disabled state
vmbr950: port 251(veth136859581.0) entering disabled state
device veth136859581.0 left promiscuous mode
vmbr950: port 251(veth136859581.0) entering disabled state
device veth136859581.1 left promiscuous mode
vmbr1348: port 2(veth136859581.1) entering disabled state
CT: 136859581: stopped
CT: 136859581: started
device veth136859581.0 entered promiscuous mode
vmbr950: port 251(veth136859581.0) entering forwarding state
device veth136859581.1 entered promiscuous mode
vmbr1348: port 2(veth136859581.1) entering forwarding state
eth0: no IPv6 routers present
eth1: no IPv6 routers present
------------[ cut here ]------------
WARNING: at fs/nfs/inode.c:120 nfs_clear_inode+0x9b/0xa0 [nfs]() (Tainted: G W --------------- )
Hardware name: PowerEdge M620
nfs_clear_inode: inode (ino: 2583637) reserved bytes: 8192
Modules linked in: xt_physdev xt_comment xt_MARK xt_set ipt_addrtype xt_conntrack ip_set_hash_net ipt_MASQUERADE iptable_nat dlm configfs ip_set vzethdev vznetdev pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop simfs vzrst nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 vzcpt nf_conntrack vzdquota vzmon vzdev ip6t_REJECT ip6table_mangle ip6table_filter ip6_tables xt_length xt_hl xt_tcpmss xt_TCPMSS iptable_mangle iptable_filter xt_multiport xt_limit xt_dscp vhost_net tun macvtap macvlan ipt_REJECT nfnetlink_log kvm_intel ip_tables nfnetlink kvm vzevent ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc bonding 8021q garp ipv6 fuse snd_pcsp iTCO_wdt snd_pcm iTCO_vendor_support snd_page_alloc snd_timer snd lpc_ich sb_edac soundcore dcdbas mfd_core edac_core shpchp wmi power_meter ext3 mbcache jbd sg usb_storage megaraid_sas ahci bnx2x mdio [last unloaded: scsi_wait_scan]
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff810733b7>] ? warn_slowpath_common+0x87/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
---[ end trace e8eeed540a6fe67e ]---
Tainting kernel with flag 0x9
Pid: 278, comm: kswapd1 veid: 0 Tainted: G W --------------- 2.6.32-32-pve #1
Call Trace:
[<ffffffff81073269>] ? add_taint+0x69/0x70
[<ffffffff810733d9>] ? warn_slowpath_common+0xa9/0xe0
[<ffffffff810734c6>] ? warn_slowpath_fmt+0x46/0x50
[<ffffffffa041a7fb>] ? nfs_clear_inode+0x9b/0xa0 [nfs]
[<ffffffff811c4cec>] ? clear_inode+0xac/0x140
[<ffffffff811c5e30>] ? dispose_list+0x40/0x120
[<ffffffff811c615a>] ? shrink_icache_memory+0x24a/0x370
[<ffffffff8114c126>] ? shrink_slab+0x176/0x1f0
[<ffffffff811502d6>] ? balance_pgdat+0x786/0xa60
[<ffffffff8115071b>] ? kswapd+0x16b/0x300
[<ffffffff81067a82>] ? default_wake_function+0x12/0x20
[<ffffffff8109fcd0>] ? autoremove_wake_function+0x0/0x40
[<ffffffff811505b0>] ? kswapd+0x0/0x300
[<ffffffff8109f738>] ? kthread+0x88/0x90
[<ffffffff810096d2>] ? __switch_to+0xc2/0x2f0
[<ffffffff8100c3ca>] ? child_rip+0xa/0x20
[<ffffffff8109f6b0>] ? kthread+0x0/0x90
[<ffffffff8100c3c0>] ? child_rip+0x0/0x20
device tap136859502i0 entered promiscuous mode
vmbr1348: port 3(tap136859502i0) entering forwarding state
vmbr1348: port 3(tap136859502i0) entering disabled state
CT: 137711681: started
device veth137711681.0 entered promiscuous mode
vmbr950: port 252(veth137711681.0) entering forwarding state
device veth137711681.1 entered promiscuous mode
vmbr1349: port 2(veth137711681.1) entering forwarding state
vmbr1349: port 2(veth137711681.1) entering disabled state
vmbr950: port 252(veth137711681.0) entering disabled state
device veth137711681.0 left promiscuous mode
vmbr950: port 252(veth137711681.0) entering disabled state
device veth137711681.1 left promiscuous mode
vmbr1349: port 2(veth137711681.1) entering disabled state
CT: 137711681: stopped
CT: 137711681: started
device veth137711681.0 entered promiscuous mode
vmbr950: port 252(veth137711681.0) entering forwarding state
device veth137711681.1 entered promiscuous mode
vmbr1349: port 2(veth137711681.1) entering forwarding state
eth0: no IPv6 routers present
eth1: no IPv6 routers present
 
Last edited:
Hello Rudi

I have following Proxmox VE:
proxmox-ve-2.6.32: 3.2-136 (running kernel: 2.6.32-32-pve)

This version is rather old - but I don´t think that is relevant here.


The iptable (NAT) on the openVZ containers is not accepted/running anymore.
So iptables -t nat -vnL gives in the OpenVZ container no error, but the NAT is not functioning.
The same servers installed yesterday had no issue and iptables/NAT is working.
So This command isn't working anymore (I think):
vzctl set 14XXXXXXX --iptables 'iptable_nat iptable_filter iptable_mangle ip_conntrack ipt_conntrack ipt_REDIRECT ipt_REJECT ipt_multiport ipt_helper ipt_LOG ipt_state' --save


So it seems the relevant kernel modules are available - otherwise it would look like this:

Code:
# iptables -t nat -vnL
FATAL: Could not load /lib/modules/2.6.32-37-pve/modules.dep: No such file or directory
iptables v1.3.3: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

I just checked iptables in containers - works fine. So I suppose there is something wrong in your configuration.

This can be considered if you post more details as follows:

from host (while the container is running, assuming your container id is 100):

Code:
cat /etc/network/interfaces
ifconfig 
cat /etc/pve/openvz/100.conf

- your iptables command you have given in the container

- describe the package which was not nat-ed correctly and why you think so.

Kind regards

Mr.Holmes
 
Hello Mr.Holmes,

thanks for your answer!

Iptables and OpenVZ is indeed working but sometimes the forwarding "dropped" because I had to much Neighbour table enties resulting in an overflow.
Now I enable net.ipv6.conf.all.disable_ipv6=0 in my containers and the IPv6 ICMP ND doesn't overflow my kernel tables anymore.
Because I do not need IPv6.

And anything is working as it should for the moment.

Thanks!

Rudi
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!