Proxmox 3.3 iptables + Hashlimit

Kristof

Renowned Member
Apr 23, 2015
1
0
66
Hello.

How I enable hashlimit inside openvz container?

uname -aLinux 2.6.32-32-pve #1 SMP Thu Aug 21 08:50:19 CEST 2014 x86_64 GNU/Linux

lsmod |grep ipt
ipt_LOG 6490 0
ipt_REDIRECT 1888 0
iptable_mangle 3525 0
ipt_REJECT 2431 4
iptable_nat 6174 0
nf_nat 23116 3 iptable_nat,ipt_REDIRECT,vzrst
nf_conntrack_ipv4 9978 20 nf_nat,iptable_nat
nf_conntrack 79766 7 xt_state,nf_conntrack_ipv4,nf_nat,iptable_nat,vzcpt,vzrst,xt_conntrack
ipt_addrtype 2137 7
iptable_filter 2969 2
ip_tables 18156 3 iptable_filter,iptable_nat,iptable_mangle

lsmod |grep hash
ip_set_hash_net 27580 2
ip_set 30993 2 ip_set_hash_net,xt_set
xt_hashlimit 10523 0

/etc/vz/vz.conf
IPTABLES="ip_conntrack ipt_state iptable_nat ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_REDIRECT"

When I add module xt_hashlimit in vz.conf and restart vz service.

vzctl start 111
Warning: Unknown iptable module: xt_hashlimit, skipped
Starting container ...

I think that something is missing in the kernel (ipt_hashlimit or other).

Do you have any idea? Thanks.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!