Proxmost host outbound networking died after latest apt upgrade

[tctitans]

After an apt update/upgrade on my proxmox host (installed on bare metal) I lost out outbound networking (can't reach gateway).

-All local VMs and LXC containers running are pingable from the proxmox host
-Internet is pingable from the local VMs and LXC containers
-Internet is NOT pingable (gateway is not pingable) from the proxmox host

same behavior after controlled reboot.

Everything was working fine and stable for the last year before the latest apt upgrade.

INFO:
=====
VE 8.4.1
IP: 10.11.11.222
GW: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 34:17:eb:ef:8e:7f brd ff:ff:ff:ff:ff:ff
inet 10.11.11.222/24 scope global vmbr0
(connected to eno1)

proxmox local IP set via DHCP reservation (10.11.11.222)
Can access proxmox webui via browser and 10.11.11.222:8006 and access host shell.

but outbound from the proxmox host is dead
e.g.
root@proxmox:~# ping 10.11.11.254
PING 10.11.11.254 (10.11.11.254) 56(84) bytes of data.
From 10.11.11.254 icmp_seq=10 Destination Port Unreachable

no problem from any of the LXCs
e.g.
root@adguard:~# ping 10.11.11.254
PING 10.11.11.254 (10.11.11.254) 56(84) bytes of data.
64 bytes from 10.11.11.254: icmp_seq=1 ttl=64 time=4.56 ms

root@adguard:~# ping 10.11.11.222
PING 10.11.11.222 (10.11.11.222) 56(84) bytes of data.
64 bytes from 10.11.11.222: icmp_seq=1 ttl=64 time=0.031 ms

any ideas?

 

[fba]

The error message is From 10.11.11.254 icmp_seq=10 Destination Port Unreachable
I am wondering as an echo request should not result in a port unreachable message, on network layer 3 no ports are used. My guess is, that some firewall config is blocking the traffic. At least I would start there for troubleshooting.

And as it is not totally clear how the update was done: in a shell it should be done via apt update && apt full-upgrade or pveupdate && pveupgrade.

 

[tctitans]

hmm.. interesting. Only firewall running is on the Router. Will think more.

just a simple apt update && apt upgrade

Thanks for the tips - at least something to research/investigate! appreciated!