Hello.
How I enable hashlimit inside openvz container?
uname -aLinux 2.6.32-32-pve #1 SMP Thu Aug 21 08:50:19 CEST 2014 x86_64 GNU/Linux
lsmod |grep ipt
ipt_LOG 6490 0
ipt_REDIRECT 1888 0
iptable_mangle 3525 0
ipt_REJECT 2431 4
iptable_nat 6174 0
nf_nat 23116 3 iptable_nat,ipt_REDIRECT,vzrst
nf_conntrack_ipv4 9978 20 nf_nat,iptable_nat
nf_conntrack 79766 7 xt_state,nf_conntrack_ipv4,nf_nat,iptable_nat,vzcpt,vzrst,xt_conntrack
ipt_addrtype 2137 7
iptable_filter 2969 2
ip_tables 18156 3 iptable_filter,iptable_nat,iptable_mangle
lsmod |grep hash
ip_set_hash_net 27580 2
ip_set 30993 2 ip_set_hash_net,xt_set
xt_hashlimit 10523 0
/etc/vz/vz.conf
IPTABLES="ip_conntrack ipt_state iptable_nat ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_REDIRECT"
When I add module xt_hashlimit in vz.conf and restart vz service.
vzctl start 111
Warning: Unknown iptable module: xt_hashlimit, skipped
Starting container ...
I think that something is missing in the kernel (ipt_hashlimit or other).
Do you have any idea? Thanks.
How I enable hashlimit inside openvz container?
uname -aLinux 2.6.32-32-pve #1 SMP Thu Aug 21 08:50:19 CEST 2014 x86_64 GNU/Linux
lsmod |grep ipt
ipt_LOG 6490 0
ipt_REDIRECT 1888 0
iptable_mangle 3525 0
ipt_REJECT 2431 4
iptable_nat 6174 0
nf_nat 23116 3 iptable_nat,ipt_REDIRECT,vzrst
nf_conntrack_ipv4 9978 20 nf_nat,iptable_nat
nf_conntrack 79766 7 xt_state,nf_conntrack_ipv4,nf_nat,iptable_nat,vzcpt,vzrst,xt_conntrack
ipt_addrtype 2137 7
iptable_filter 2969 2
ip_tables 18156 3 iptable_filter,iptable_nat,iptable_mangle
lsmod |grep hash
ip_set_hash_net 27580 2
ip_set 30993 2 ip_set_hash_net,xt_set
xt_hashlimit 10523 0
/etc/vz/vz.conf
IPTABLES="ip_conntrack ipt_state iptable_nat ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_REDIRECT"
When I add module xt_hashlimit in vz.conf and restart vz service.
vzctl start 111
Warning: Unknown iptable module: xt_hashlimit, skipped
Starting container ...
I think that something is missing in the kernel (ipt_hashlimit or other).
Do you have any idea? Thanks.