Proxmox Venet problem

[Kedaal]

Hello,

I recently installed Proxmox 1.7 on my dedicted server.

I added some OpenVZ VE configured in veth network ( bridge ) with MAC Addresses ( I have some Fail Over IP ). But I dont want to permit VE's users to edit their network configuration.

Then I found the venet method.

I tried to add some VE with Venet Network. I put the Fail Over IP into the IP Field and start the VE......

The VE and the HostNode can communicate ( ping ) and VEs configured with Venet can communicate between them too.

But the VE cant access to Internet and Internet cant access to VE :S

Here is my /etc/network/interfaces on the Host-Node

auto lo
iface lo inet loopback

# The primary network interface
auto vmbr0
iface vmbr0 inet static
        address 88.190.X.X
        netmask 255.255.255.0
        gateway 88.190.14.1
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0

Where X.X is my main IP.

Here is the ifconfig command on the HN :

eth0      Link encap:Ethernet  HWaddr b8:ac:6f:94:df:f6  
          adr inet6: fe80::baac:6fff:fe94:ZZZ6/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:60015562 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9256883 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000 
          RX bytes:6657882125 (6.2 GiB)  TX bytes:5533013915 (5.1 GiB)
          Interruption:16 Mémoire:da000000-da012800 

lo        Link encap:Boucle locale  
          inet adr:127.0.0.1  Masque:255.0.0.0
          adr inet6: ::1/128 Scope:Hôte
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1763767 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1763767 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0 
          RX bytes:271614471 (259.0 MiB)  TX bytes:271614471 (259.0 MiB)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:1973 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1709 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0 
          RX bytes:297963 (290.9 KiB)  TX bytes:172334 (168.2 KiB)

veth101.0 Link encap:Ethernet  HWaddr 00:18:51:ea:0b:06  
          adr inet6: fe80::218:51ff:feea:b06/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:81087 errors:0 dropped:0 overruns:0 frame:0
          TX packets:96444 errors:0 dropped:135524 overruns:0 carrier:0
          collisions:0 lg file transmission:0 
          RX bytes:63247883 (60.3 MiB)  TX bytes:7098672 (6.7 MiB)

veth102.0 Link encap:Ethernet  HWaddr 00:18:51:03:f9:75  
          adr inet6: fe80::218:51ff:fe03:f975/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5033004 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5957819 errors:0 dropped:15309284 overruns:0 carrier:0
          collisions:0 lg file transmission:0 
          RX bytes:2757092175 (2.5 GiB)  TX bytes:477355907 (455.2 MiB)

vmbr0     Link encap:Ethernet  HWaddr b8:ac:6f:94:df:f6  
          inet adr:88.190.X.X  Bcast:88.190.14.255  Masque:255.255.255.0
          adr inet6: fe80::baac:6fff:fe94:ZZZZ/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5780076 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1236762 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0 
          RX bytes:1515707078 (1.4 GiB)  TX bytes:1494622484 (1.3 GiB)

And here is the route -n :

 route -n
Table de routage IP du noyau
Destination     Passerelle      Genmask         Indic Metric Ref    Use Iface
88.190.228.X   0.0.0.0         255.255.255.255 UH    0      0        0 venet0
88.190.14.0     0.0.0.0         255.255.255.0   U     0      0        0 vmbr0
0.0.0.0         88.190.14.1     0.0.0.0         UG    0      0        0 vmbr0

Where .X is the Fail Over IP.

The sysctl -p :

sysctl -p
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.ip_forward = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.proxy_arp = 1
net.ipv4.conf.all.proxy_arp = 1
kernel.sysrq = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.eth0.proxy_arp = 1

Note::VEs configured with MAC ( veth - vmbr0 ) work good.

Can you help me please ? :S

Thanks !

 

[dietmar]

Try to use tcpdump to debug.

 

[Kedaal]

Thanks, I'll try and post a reply here.