I'm using Proxmox 3, it is a fresh installation. For those who know, I'm using OVH Vrack 1.5 (along with a previous Vrack 1.0).
My server has two interface eth0 and eth1, I succeeded to configure both private and public ip on the host node, and I'm able to ping all my server on the vlan.
Now, I created an OpenVZ container, and I assign both a public and private ip in the Proxmox GUI (simple venet).
Let's say I use 172.16.0.129 for the internal network.
Once I login in the container, I'm able to successfully ping all my private network but I'm not able to reach any public ip.
Here is the host node configuration:
ifconfig
dummy0 Link encap:Ethernet HWaddr 8a:ee:41:c1:ec:53
inet6 addr: fe80::84ed:41ff:fec1:ec53/64 Scope:Link
UP BROADCAST RUNNING NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:29 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:1950 (1.9 KiB)
eth0 Link encap:Ethernet HWaddr 00:32:90:a7:43:48
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:111570 errors:0 dropped:0 overruns:0 frame:0
TX packets:58220 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:140197486 (133.7 MiB) TX bytes:8647245 (8.2 MiB)
eth1 Link encap:Ethernet HWaddr 00:25:90:54:43:49
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:421 errors:0 dropped:0 overruns:0 frame:0
TX packets:93 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:43258 (42.2 KiB) TX bytes:6322 (6.1 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:3879 errors:0 dropped:0 overruns:0 frame:0
TX packets:3879 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2507778 (2.3 MiB) TX bytes:2507778 (2.3 MiB)
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet6 addr: fe80::1/128 Scope:Link
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:49 errors:0 dropped:0 overruns:0 frame:0
TX packets:28 errors:0 dropped:3 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3535 (3.4 KiB) TX bytes:2236 (2.1 KiB)
vmbr0 Link encap:Ethernet HWaddr 00:25:90:a7:43:48
inet addr:5.135.14.28 Bcast:5.135.14.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:103047 errors:0 dropped:0 overruns:0 frame:0
TX packets:54482 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:137374926 (131.0 MiB) TX bytes:6823790 (6.5 MiB)
vmbr1 Link encap:Ethernet HWaddr 86:ed:41:c1:ec:53
inet6 addr: fe80::84ed:41ff:fec1:ec53/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:578 (578.0 B)
vmbr2 Link encap:Ethernet HWaddr 00:25:90:a7:43:49
inet addr:172.16.0.128 Bcast:172.31.255.255 Mask:255.240.0.0
inet6 addr: fe80::225:90ff:fea7:4349/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:349 errors:0 dropped:0 overruns:0 frame:0
TX packets:69 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:30789 (30.0 KiB) TX bytes:4794 (4.6 KiB)
interfaces
auto lo
iface lo inet loopback
# for Routing
auto vmbr1
iface vmbr1 inet manual
post-up /etc/pve/kvm-networking.sh
bridge_ports dummy0
bridge_stp off
bridge_fd 0
# vmbr0: Bridging. Make sure to use only MAC adresses that were assigned to you.
auto vmbr0
iface vmbr0 inet static
address 5.135.14.28
netmask 255.255.255.0
network 5.135.14.0
broadcast 5.135.14.255
gateway 5.135.14.254
bridge_ports eth0
bridge_stp off
bridge_fd 0
# bridge vrack 1.5
auto vmbr2
iface vmbr2 inet static
address 172.16.0.128
netmask 255.240.0.0
broadcast 172.31.255.255
gateway 172.31.255.254
bridge_ports eth1
bridge_stp off
bridge_fd 0
And the routing table:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.16.0.129 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
4.1.5.13 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
5.135.14.0 0.0.0.0 255.255.255.0 U 0 0 0 vmbr0
172.16.0.0 0.0.0.0 255.240.0.0 U 0 0 0 vmbr2
0.0.0.0 5.135.14.254 0.0.0.0 UG 0 0 0 vmbr0
The container routing table is the following:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 venet0
and ifconfig
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.2 P-t-P:127.0.0.2 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:3 errors:0 dropped:0 overruns:0 frame:0
TX packets:21 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:252 (252.0 B) TX bytes:1594 (1.5 KB)
venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.0.129 P-t-P:172.16.0.129 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
venet0:1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:4.1.5.173 P-t-P:4.1.5.173 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
To resume:
- from the host I'm able to reach both public and private network.
- from the container I'm able to reach either the public or the private network depending on the order I assign ip addresses.
I compared to some existing Proxmox configuration which works great but I was not able to find any diffs.
Any help will be greatly appreciated. Thanks.