Search results

Re: IPSET: restore failed - firewall cannot anymore yep it works now! so there is a maximal lenght! dont know how mucho.. but seems to be short. maybe add this to the regxep pattern for the name in the gui!

Re: IPSET: restore failed - firewall cannot anymore maybe PVEFW-0-mailingserver-hosts is too long? because this ipset has also about 12 ips in the gui but they are missing in the ipset save

Re: IPSET: restore failed - firewall cannot anymore create PVEFW-0-ceph-hosts hash:net family inet hashsize 64 maxelem 64 add PVEFW-0-ceph-hosts 192.168.13.0/24 create PVEFW-0-management hash:net family inet hashsize 64 maxelem 64 add PVEFW-0-management 192.168.11.0/24 create...

Re: IPSET: restore failed - firewall cannot anymore [del]

hello, after some time now i get this message all the time and the firewall will not reload anymore. how can i debug that? pve-firewall[13672]: status update error: command '/usr/sbin/ipset restore' failed: exit code 1

hi, i was using a server with apache as reverse proxy. first because the proxmox servers have no internet ip and second because of security. but novnc does not work (javs vnc works) i installed apache 2.4 which has support for webproxies... but with the url...

hi, i played around with the io limiting for the disk. we have server with local storage and also ceph cluster. when i limit the disk for example to 500 iops i get around 2mb with 4K reads/writes what is exactly 500 iops. but with 4M blocks i get only a speed of 65M/sec which is far below that...

doesnt sound like network problem. you can allways check with iptables -L if something is firewalled. maybe a more a dns problem?

Re: ftp ist blocked for those who maybe will be looking for the same problem: run: modprobe ip_conntrack_ftp and add ip_conntrack_ftp to /etc/modules (so it also works after restart)

hi, i added ftp to the firewall. a client can connect to the server and is promted for user & pwd but then they get timeouts. in the log i find that: SRC=XXXXXXXXXX DST=XXXXXXXX LEN=60 TOS=0x00 PREC=0x00 TTL=120 ID=3786 DF PROTO=TCP SPT=51122 DPT=44499 SEQ=260317126 ACK=0 WINDOW=8192 SYN is...

thank you! the output is following: (and cpu is allways 0 on a running machine- on the gui i get values) "balloon" : 4294967296, "cpu" : 0, "cpus" : 2, "disk" : 0, "diskread" : 9269799424, "diskwrite" : 19936676864, "ha" : 0, "maxdisk" : 1073741824, "maxmem" ...

hi, with qm status -verbose i dont get the cpu % how does proxmox get it for the gui? i would like to make some script for zabbix monitoring...

i will wait for the next time this occurs and check network... at the moment it is working again...

todo i can confirm that live migration suddently work! i did not change anything? just pressig the same button live migration. will test it again the next days.... but what coult break it temoporary?

i dont know what exactly you mean with join. i can see all ceph images on the target node. i can create a new vm on ceph on the target node. and i can also clone a vm from another node to this node. i can also migrate (NOT LIVE!) only live migration fails. but the strange thing is that the...

is there any possibility to get some debug messages?

hi, i tried online migration but: Aug 22 15:43:18 starting migration of VM 208 to node 'ceph2' (192.168.11.32) Aug 22 15:43:18 copying disk images Aug 22 15:43:18 starting VM 208 on remote node 'ceph2' Aug 22 15:43:20 starting ssh migration tunnel Aug 22 15:43:20 starting online/live migration...

so like udo writes connect two vms tagged with vlans on different hosts is impossible without configuring the vlans on the switch? or did somebody get it working without?

interfaces from one of the host nodes (the other is equal just with other ips...: auto lo iface lo inet loopback auto eth0 iface eth0 inet manual broadcast 192.168.11.255 network 192.168.11.0 auto eth1 iface eth1 inet manual auto vmbr0 iface vmbr0 inet static...

hi, i tried to make a vlan (with the proxmox gui) networks are simple vmbr0's i can ping to vms on the same host configured with the same tag but not another vm machine on another host with the same vlan tag. any ideas?