Recent content by muyang_ren

Thank you！ In order to test effectively, the OS of my LxC and KVM VMS are both ubuntu20.04. Virtio driver has been installed automatically during the installation of KVM type VMS, otherwise it should not be connected to the network normally. In addition, I also selected E1000 network card for...

In the same Gigabit transmission network environment, the download rate of accessing the target node through LxC chicken can reach 100m, but the maximum access to the same target with KVM chicken is less than 10m. My KVM chicken network card is virtio model。 Help reasons or how to adjust the...

It seems that KSM does not support LxC type VM optimization. I wonder if there is any other solution?

The following is a detailed list of iptables rule configuration, which may help you： # Generated by iptables-save v1.8.2 on Thu Jun 18 04:17:20 2020 *nat :PREROUTING ACCEPT [18:1380] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [3:180] :POSTROUTING ACCEPT [3:180] -A PREROUTING -i enp2s0 -p tcp -m tcp...

ebtables cmdlist: exists PVEFW-FORWARD (ULtZ6lqjrD/jAKLY+OZo3BbXs9k) -A PVEFW-FORWARD -p IPv4 -j ACCEPT -A PVEFW-FORWARD -p IPv6 -j ACCEPT -A PVEFW-FORWARD -o fwln+ -j PVEFW-FWBR-OUT exists PVEFW-FWBR-OUT (bBErr+BFdPnjoJyK1GRUb7tVk9o) -A PVEFW-FWBR-OUT -i tap100i0 -j tap100i0-OUT...

ip6tables cmdlist: exists PVEFW-Drop (Jb79Uw7z1vZglIcV7QXA5uY/nbk) -A PVEFW-Drop -p tcp --dport 43 -j PVEFW-reject -A PVEFW-Drop -j PVEFW-DropBroadcast -A PVEFW-Drop -p icmpv6 -m icmpv6 --icmpv6-type destination-unreachable -j ACCEPT -A PVEFW-Drop -p icmpv6 -m icmpv6...

Hello oguz， According to your suggestion last time, I added the rule item suggested in the document to the raw table, which effectively solved the problem of VM accessing the external network. However, the VM still could not Ping the gateway address of the host, and the internal VMS could not...

That's fine. Thank you!

Hello,oguz： The above is all the output data generated according to the command you require. In firewall configuration, in addition to several features, the specific port forwarding of a virtual machine is manually added by me, other parameters are automatically generated after the firewall is...

ip6tables cmdlist: exists PVEFW-Drop (Jb79Uw7z1vZglIcV7QXA5uY/nbk) -A PVEFW-Drop -p tcp --dport 43 -j PVEFW-reject -A PVEFW-Drop -j PVEFW-DropBroadcast -A PVEFW-Drop -p icmpv6 -m icmpv6 --icmpv6-type destination-unreachable -j ACCEPT -A PVEFW-Drop -p icmpv6 -m icmpv6...

Turning on the firewall automatically generates too many rules, as follows: root@PVE101 ~ # pve-firewall compile ipset cmdlist: exists PVEFW-0-management-v4 (wUkb5FpQvEqpMcadyVEXs1Pr/dU) create PVEFW-0-management-v4 hash:net family inet hashsize 64 maxelem 64 exists PVEFW-0-management-v6...

Than you! root@PVE101 ~ # pveversion -v proxmox-ve: 6.2-1 (running kernel: 5.4.41-1-pve) pve-manager: 6.2-6 (running version: 6.2-6/ee1d7754) pve-kernel-5.4: 6.2-2 pve-kernel-helper: 6.2-2 pve-kernel-5.4.41-1-pve: 5.4.41-1 ceph-fuse: 12.2.11+dfsg1-2.1+b1 corosync: 3.0.3-pve1 criu: 3.11-3...

The host is connected to the normal network through vmbr0 bridge, and the VM is connected to the network through vmbr1 interface NAT mode. There should be no problem in each configuration, and the network can be connected normally when the VM firewall is not turned on. However, once the VM...