Recent content by cmassoglia

We use an EMC VNXe3100 with dual controller, multipath without problems. ISCSI + LVM works perfect in a proxmox cluster with 2 nodes. Best regards,

I think you must resize the filesystem inside your VM before resize the disk. Now your VM continues with a filesystem with 50GB but the disk was shrink to 20GB, so I think you lose info/partitions.

Yes, that is possible but you need to configure both proxmox servers in a cluster. Both proxmox servers in a cluster permits to manage backups, migrations and hardware resources in a centralized way. It is not required you configure HA for your VM and CT if you dont need it. Actually we have 2...

auto lo iface lo inet loopback Your config must be like this Your error was you set an IP for eth0 and did not set the bridge_ports to vmbr0

When a server is hacked the best practice is reinstall the server. Is your hostnode accesible from Internet?. Is your hostnode accesible from your VM?

KVM Only with iscsi + LVM

Maybe you need to put a firewall in front your cluster and configure VPN access to your hostnodes. Also you must need to isolate hostnodes network using a dedicated vlan. In our setup we must access to webui and ssh only through VPN. We put a Pfsense firewall in front all our infrastructure...

did you restart networking service after change the network config file?

I think your config is wrong. You need something like this: auto eth0 iface eth0 inet manual auto eth1 iface eth1 inet manual auto vmbr0 iface vmbr0 inet static address 173.199.143.197 netmask 255.255.255.240 gateway 173.199.143.193 bridge_ports eth0 bridge_stp off bridge_fd 0 auto vmbr1...

Post your /etc/network/interfaces file to help you.

I only use KVM and I dont know if with containers is the same, but you need to create a new bridge with your second nic and assigne it that bridge as a second network interface to your VM's. eth0-->vmbr0 ---> WAN eth1--->vmbr1 ---> Lan

I suppose the problem is produced because you restored a backup in a new VM and you didnt change the mac address. Two (or more) same mac address in the same network segment produces sometimes problems like you described Sorry my bad english.

When you use iscsi over any connection type you must use with LVM. With this, you can attach the iscsi in each proxmox node and use it with problem about concurrent access Each VM (KVM) must use raw disk, so when a node start a vm only that node activate the logical volume in lvm for that vm...

Hello you can use iptables with this simple rules ###### FROM HERE ###### #!/bin/bash iptables -F iptables -X iptables -Z ###Default policies iptables -P INPUT DROP iptables -P OUTPUT ACCEPT #Accept ping iptables -A INPUT -p icmp -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A...