Bridge doesn't work with kernel 2.6.32-7-pve

[Fleg]

I installed proxmox V2 RC1 on HP proliant BL465c G7 (amd procs) both with the install CD and on top of a fresh debian squeeze.

In both cases The bridge does not work properly with kernel 2.6.32-7-pve (
but it works if I downgrade to kernel* 2.6.32-6-pve).

By does not work i mean that i cannot ssh to or from the server and the web page is unreachable (but surprisingly ping to and from works !!!).

If I suppress the bridge and configure directly eth0, then i get the network back.

So my questions are :

- does somebody had this problem or guess what causes it ?
- is there a way to fix it ?
- what should not work if using kernel 2.6.32-6-pve instead of 2.6.32-7-pve ?

Thanks for your help

F.

Ps : here is my network config... Nothing special !


# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto vmbr0
iface vmbr0 inet static
*** address xxx.xxx.xxx.xxx
*** netmask xxx.xxx.xxx.xxx
*** network xxx.xxx.xxx.xxx
*** broadcast xxx.xxx.xxx.xxx
*** gateway xxx.xxx.xxx.xxx
*** dns-nameservers xxx.xxx.xxx.xxx
*** dns-search mydomain.com
*** bridge_ports eth0
*** bridge_fd 0
*** bridge_maxwait 0
*** bridge_stp off

 

[Fleg]

Nobody had this problem ?

 

[charnov]

Same kernel (with a bonded, too):

# network interface settings
auto lo
iface lo inet loopback


iface eth0 inet manual


iface eth1 inet manual


auto eth2
iface eth2 inet static
address x.x.x.x
netmask 255.255.255.0
mtu 8982


auto bond0
iface bond0 inet manual
slaves eth0 eth1
bond_miimon 100
bond_mode balance-rr


auto vmbr0
iface vmbr0 inet static
address x.x.x.x

 

[charnov]

vmbr0 is my main bridge (with several VLANs) and it bridges to a bonded eth0 and 1. eth2 is my SAN only.

 

[Fleg]

I think I found the problem.
I got it to work following the recommendation of this page : http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge
If I do :

echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables

or better

sysctl net.bridge-nf-call-iptables=0

it solve the problem !

 

[Fleg]

and of course add

net.bridge-nf-call-iptables=0

in /etc/sysctl.conf to make it permanent and add the following line in /etc/rc.local (before exit 0).

/sbin/sysctl -p /etc/sysctl.conf
​

(because it seems that when the /etc/sysctl.conf is loaded for the first time the bridge module is not yet loaded so the parameters are not used, thus you need to load it again).