Search results

  1. J

    TCP RST,ACK between two VM

    And then: # tcpdump -nSe -i vmbr0 host 10.10.10.103 19:05:42.491957 46:2c:c5:c4:27:53 > 5a:ab:95:29:4a:7a, ethertype IPv4 (0x0800), length 74: 10.10.10.106.42036 > 10.10.10.103.443: Flags [S], seq 3043812723, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 494310551 ecr 0], length 0...
  2. J

    TCP RST,ACK between two VM

    After that I changed the NAT rules but I don't know if it changes something. From: DNAT tcp -- eno3 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 /* HTTP nginx */ to:10.10.10.106:80 DNAT tcp -- eno3 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 /* HTTPS...
  3. J

    TCP RST,ACK between two VM

    Some other details: # uname -a Linux pve1 5.13.19-1-pve #1 SMP PVE 5.13.19-3 (Tue, 23 Nov 2021 13:31:19 +0100) x86_64 GNU/Linux # cat /etc/pve/firewall/103.fw [OPTIONS] log_level_out: debug enable: 1 log_level_in: debug policy_out: DROP policy_in: DROP [RULES] OUT Web(ACCEPT) -log nolog IN...
  4. J

    TCP RST,ACK between two VM

    I had a cron doing a curl every 10 minutes: $ grep HTTP debugwwwcurlv4|sort|uniq -c 42 HTTP/2 302 24 HTTP/2 502 More than sometimes, in fact...
  5. J

    TCP RST,ACK between two VM

    Hello, I have a problem for many years, and I suddenly decided to resolve it... I have it with different hardware, and I had it also with PVE 4, I think. I have servers with only one IPv4 so I do NAT. I have for the main interface: auto vmbr0 iface vmbr0 inet static address...
  6. J

    I/O errors since upgrading to PVE 7.1

    Hello @FingerlessGloves. My OS don't seem to like SCSI. I'm not much used to change these settings. I just choose SATA and it's fine. I have FreeBSD VM which work well with VirtIO by the way.
  7. J

    I/O errors since upgrading to PVE 7.1

    Have issues too, "threads" doesn't help. Edit: even with VirtIO
  8. J

    NAT and firewall for LXC CTs

    I reopen this thread because I see some things I don't understand. At container's boot, maybe not all the time but often, the CT has no Internet access (I ping a reliable IP). 10.10.8.1 is vmbr0 gateway (4e:dd:39:00:39:2f) wiki is CT's name (tcpdump arp running on CT) 20:53:34.738665 ARP...
  9. J

    Using Container over one public IP

    If your configuration is bridged, it's in the configuration of your router (192.168.1.1) that you must add a NAT rule.
  10. J

    NAT and firewall for LXC CTs

    Hello, I searched but didn't find the response to this question: Can built-in firewall be used with LXC CTs behind NAT? I run a fresh PVE/4.1-1/2f9650d4 (running kernel: 4.2.6-1-pve) and have the following config: # cat /etc/network/interfaces auto lo iface lo inet loopback auto eth0 iface...

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!