OpenVZ Forum


Home » General » Support » OpenSuSE precreated no connectiviy
OpenSuSE precreated no connectiviy [message #12262] Mon, 23 April 2007 12:15 Go to next message
goeldi
Messages: 92
Registered: June 2006
Member
I use a CentOS 5 as HN and the OpenSuSE 10 precreated image as VE. Kernel is 2.6.18-8.el5.028stab027.1. This software is on the HN:
vzquota-3.0.9-1
vzyum-2.4.0-11
vzpkg-2.7.0-18
vzrpm43-python-4.3.3-7_nonptl.6
vztmpl-centos-4-2.0-2
vzctl-lib-3.0.16-1
vzctl-3.0.16-1
vzrpm44-4.4.1-22.5
vzrpm44-python-4.4.1-22.5
vzrpm43-4.3.3-7_nonptl.6

I can start and stop the VE from HN without any problem. Yum on HN works too. Now my problem is, that I have no connectivity at all to and from the VE (ping from HN to VE and ping from VE to HN or the internet doesn't work).

Here is my configuration:

/sbin/ifconfig -a on HN:
eth1      Link encap:Ethernet  HWaddr 00:14:78:06:60:A0
          inet addr:147.86.124.80  Bcast:147.86.127.255  Mask:255.255.252.0
          inet6 addr: fe80::214:78ff:fe06:60a0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:300 errors:0 dropped:0 overruns:0 frame:0
          TX packets:102 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:29180 (28.4 KiB)  TX bytes:11179 (10.9 KiB)
          Interrupt:201 Base address:0x8c00

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:147.86.124.83  P-t-P:147.86.124.83  Bcast:147.86.127.255  Mask:255.255.252.0
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)


/sbin/ifconfig -a on VE:

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:127.0.0.1  P-t-P:127.0.0.1  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:147.86.124.81  P-t-P:147.86.124.81  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1


ifconfig -a on VE:

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:127.0.0.1  P-t-P:127.0.0.1  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:147.86.124.81  P-t-P:147.86.124.81  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1


route -n on VE:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.0.2.0       0.0.0.0         255.255.255.0   U     0      0        0 venet0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo



route -n on HN:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
147.86.124.0    0.0.0.0         255.255.252.0   U     0      0        0 eth1
147.86.124.0    0.0.0.0         255.255.252.0   U     0      0        0 venet0
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 venet0
0.0.0.0         147.86.124.1    0.0.0.0         UG    0      0        0 eth1


iptables -L -vn on HN:
[CODE]
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  614 64302 RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 325 packets, 37935 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain RH-Firewall-1-INPUT (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
    2   168 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 255
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     ah   --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.251         udp dpt:5353
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:631
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:631
  390 30609 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:10000
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
  221 33477 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited[/CODE]


iptables on VE is not running


/etc/vz/conf/12481.conf
ONBOOT="yes"

# UBC parameters (in form of barrier:limit)
# Primary parameters
AVNUMPROC="40:40"
NUMPROC="65:65"
NUMTCPSOCK="80:80"
NUMOTHERSOCK="80:80"
VMGUARPAGES="6144:2147483647"
# Secondary parameters
KMEMSIZE="2752512:2936012"
TCPSNDBUF="319488:524288"
TCPRCVBUF="319488:524288"
OTHERSOCKBUF="132096:336896"
DGRAMRCVBUF="132096:132096"
OOMGUARPAGES="6144:2147483647"
# Auxiliary parameters
LOCKEDPAGES="32:32"
SHMPAGES="8192:8192"
PRIVVMPAGES="59152:63575"
NUMFILE="2048:2048"
NUMFLOCK="100:110"
NUMPTY="16:16"
NUMSIGINFO="256:256"
DCACHESIZE="1048576:1097728"

PHYSPAGES="0:2147483647"
NUMIPTENT="128:128"

# Disk quota parameters (in form of softlimit:hardlimit)
DISKSPACE="1048576:1153434"
DISKINODES="200000:220000"
QUOTATIME="0"

# CPU fair sheduler parameter
CPUUNITS="1000"
VE_ROOT="/vz/root/$VEID"
VE_PRIVATE="/vz/private/$VEID"
OSTEMPLATE="opensuse-10-i386-default"
ORIGIN_SAMPLE="vps.basic"
IP_ADDRESS="147.86.124.81"
HOSTNAME="12481.fhnw.ch"


/etc/vz/vz.conf:



## Global parameters
VIRTUOZZO=yes
LOCKDIR=/vz/lock
DUMPDIR=/vz/dump
VE0CPUUNITS=1000

## Logging parameters
LOGGING=yes
LOGFILE=/var/log/vzctl.log
LOG_LEVEL=0
VERBOSE=0

## Disk quota parameters
DISK_QUOTA=yes
VZFASTBOOT=no

# The name of the device whose ip address will be used as source ip for VE.
# By default automatically assigned.
#VE_ROUTE_SRC_DEV="eth0"

## Template parameters
TEMPLATE=/vz/template

## Defaults for VEs
VE_ROOT=/vz/root/$VEID
VE_PRIVATE=/vz/private/$VEID
CONFIGFILE="vps.basic"
DEF_OSTEMPLATE="fedora-core-4"

## Load vzwdog module
VZWDOG="no"
IPV6="no"

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"


Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12271 is a reply to message #12262] Mon, 23 April 2007 17:52 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Hello,

I looked through your settings and some things are really strange for me. For example IP address of venet device on HN - no of OpenVZ scripts/tools set an IP address on it... Soi I want to ask you, how did you set up network? Did you do it manually? What exact commands did you use?

And the second question: please, try to turn off iptables at all for the beginning and ping HN from VE and on the contrary.

Thanks,
Vasily.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12335 is a reply to message #12271] Wed, 25 April 2007 13:15 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
OK, I reinstalled the CentOS5 server this time more standard compliant Wink

The OpenSuSE precreated VE is running now, and I can ping to HN from VE and to VE from HN. Pinging to google.com from VE is not possible though.

Here are my new specs:

/sbin/ifconfig -a on HN:
eth0      Link encap:Ethernet  HWaddr 00:C0:9F:45:88:12
          inet addr:147.86.124.80  Bcast:147.86.127.255  Mask:255.255.252.0
          inet6 addr: fe80::2c0:9fff:fe45:8812/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1905 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1012 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:232625 (227.1 KiB)  TX bytes:447344 (436.8 KiB)
          Base address:0xece0 Memory:fe2e0000-fe300000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:36 errors:0 dropped:0 overruns:0 frame:0
          TX packets:29 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1824 (1.7 KiB)  TX bytes:2292 (2.2 KiB)


/sbin/ifconfig -a on VE:
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:127.0.0.1  P-t-P:127.0.0.1  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:41 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:3204 (3.1 Kb)  TX bytes:2400 (2.3 Kb)

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:147.86.124.81  P-t-P:147.86.124.81  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1


route -n on VE:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.0.2.0       0.0.0.0         255.255.255.0   U     0      0        0 venet0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.0.2.1       0.0.0.0         UG    0      0        0 venet0


route -n on HN:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
147.86.124.81   0.0.0.0         255.255.255.255 UH    0      0        0 venet0
147.86.124.0    0.0.0.0         255.255.252.0   U     0      0        0 eth0
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
0.0.0.0         147.86.124.1    0.0.0.0         UG    0      0        0 eth0


iptables -L -vn on HN:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 1824  227K RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
   54  2688 RH-Firewall-1-INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 1352 packets, 466K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain RH-Firewall-1-INPUT (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 255
    0     0 ACCEPT     esp  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     ah   --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.251         udp dpt:5353
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:631
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:631
 1295 90004 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:10000
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
  582  139K REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited


/etc/vz/conf/12481.conf
ONBOOT="yes"

# UBC parameters (in form of barrier:limit)
# Primary parameters
AVNUMPROC="40:40"
NUMPROC="65:65"
NUMTCPSOCK="80:80"
NUMOTHERSOCK="80:80"
VMGUARPAGES="6144:2147483647"
# Secondary parameters
KMEMSIZE="2752512:2936012"
TCPSNDBUF="319488:524288"
TCPRCVBUF="319488:524288"
OTHERSOCKBUF="132096:336896"
DGRAMRCVBUF="132096:132096"
OOMGUARPAGES="6144:2147483647"
# Auxiliary parameters
LOCKEDPAGES="32:32"
SHMPAGES="8192:8192"
PRIVVMPAGES="49152:53575"
NUMFILE="2048:2048"
NUMFLOCK="100:110"
NUMPTY="16:16"
NUMSIGINFO="256:256"
DCACHESIZE="1048576:1097728"

PHYSPAGES="0:2147483647"
NUMIPTENT="128:128"

# Disk quota parameters (in form of softlimit:hardlimit)
DISKSPACE="1048576:1153434"
DISKINODES="200000:220000"
QUOTATIME="0"

# CPU fair sheduler parameter
CPUUNITS="1000"
VE_ROOT="/vz/root/$VEID"
VE_PRIVATE="/vz/private/$VEID"
OSTEMPLATE="opensuse-10-i386-default"
ORIGIN_SAMPLE="vps.basic"
IP_ADDRESS="147.86.124.81"
IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc ipt_REDIRECT"


/etc/vz/vz.conf:
## Global parameters
VIRTUOZZO=yes
LOCKDIR=/vz/lock
DUMPDIR=/vz/dump
VE0CPUUNITS=1000

## Logging parameters
LOGGING=yes
LOGFILE=/var/log/vzctl.log
LOG_LEVEL=0
VERBOSE=0

## Disk quota parameters
DISK_QUOTA=yes
VZFASTBOOT=no

# The name of the device whose ip address will be used as source ip for VE.
# By default automatically assigned.
#VE_ROUTE_SRC_DEV="eth0"

## Template parameters
TEMPLATE=/vz/template

## Defaults for VEs
VE_ROOT=/vz/root/$VEID
VE_PRIVATE=/vz/private/$VEID
CONFIGFILE="vps.basic"
DEF_OSTEMPLATE="fedora-core-4"

## Load vzwdog module
VZWDOG="no"
IPV6="no"

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"


/etc/resolv.conf in VE
nameserver 147.86.80.20
nameserver 147.86.80.21
nameserver 208.67.222.222

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12336 is a reply to message #12335] Wed, 25 April 2007 13:27 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
1) cat /proc/sys/net/ipv4/ip_forward
2) can you ping google by IP address?
3) try to flush all iptables rules except NAT from VE.

Vasily.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12337 is a reply to message #12336] Wed, 25 April 2007 13:32 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
1) /proc/sys/net/ipv4/ip_forward
1

2) can you ping google by IP address?
Yes!

3) try to flush all iptables rules except NAT from VE.

iptables is not running in the VE:

/usr/sbin/iptables -L -vn
Chain INPUT (policy ACCEPT 32 packets, 2544 bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 33 packets, 1816 bytes)
pkts bytes target prot opt in out source destination

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12340 is a reply to message #12337] Wed, 25 April 2007 13:46 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
And how do you assign VE a nameserver? You should use vzctl set <veid> --nameserver <nameserver_ip>, rather when modifying /etc/resolv.conf in VE.

Please also provide
iptables -t nat -L -nv
output.

Thanks.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12341 is a reply to message #12340] Wed, 25 April 2007 13:50 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
iptables -t nat -L -nv in HN:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12342 is a reply to message #12341] Wed, 25 April 2007 13:57 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Ahem, I see that in your VE config file there is no NAMESERVER parameter! You should use
vzctl set <veid> --nameserver <NS> --save
command in order to set nameserver for VE!

Vasily.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12343 is a reply to message #12342] Wed, 25 April 2007 14:04 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
OK:

/etc/vz/conf/481.conf now:


ONBOOT="yes"

# UBC parameters (in form of barrier:limit)
# Primary parameters
AVNUMPROC="40:40"
NUMPROC="65:65"
NUMTCPSOCK="80:80"
NUMOTHERSOCK="80:80"
VMGUARPAGES="6144:2147483647"
# Secondary parameters
KMEMSIZE="2752512:2936012"
TCPSNDBUF="319488:524288"
TCPRCVBUF="319488:524288"
OTHERSOCKBUF="132096:336896"
DGRAMRCVBUF="132096:132096"
OOMGUARPAGES="6144:2147483647"
# Auxiliary parameters
LOCKEDPAGES="32:32"
SHMPAGES="8192:8192"
PRIVVMPAGES="49152:53575"
NUMFILE="2048:2048"
NUMFLOCK="100:110"
NUMPTY="16:16"
NUMSIGINFO="256:256"
DCACHESIZE="1048576:1097728"

PHYSPAGES="0:2147483647"
NUMIPTENT="128:128"

# Disk quota parameters (in form of softlimit:hardlimit)
DISKSPACE="1048576:1153434"
DISKINODES="200000:220000"
QUOTATIME="0"

# CPU fair sheduler parameter
CPUUNITS="1000"
VE_ROOT="/vz/root/$VEID"
VE_PRIVATE="/vz/private/$VEID"
OSTEMPLATE="opensuse-10-i386-default"
ORIGIN_SAMPLE="vps.basic"
IP_ADDRESS="147.86.124.81"
IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc ipt_REDIRECT"

NAMESERVER="208.67.222.222"

Still cannot ping to domain names, pinging to ips works.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12344 is a reply to message #12343] Wed, 25 April 2007 14:10 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Can you ping DNS server IP address from VE? Do you use the same DNS for HN and for VE? Can you give me an access to the node?

Vasily.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12345 is a reply to message #12344] Wed, 25 April 2007 14:16 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
ping DNS: yes

same DNS: yes

access: Unfortunately not accessible from outside Sad

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12347 is a reply to message #12345] Wed, 25 April 2007 14:28 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Hmm. And what output
nslookup google.com
in VE?

Thanks,
Vasily.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12348 is a reply to message #12347] Wed, 25 April 2007 14:43 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
nslookup google.com
;; connection timed out; no servers could be reached

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12350 is a reply to message #12348] Wed, 25 April 2007 14:59 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
What about two consequent commands:

nslookup google.com 208.67.222.222
nslookup google.com 195.85.81.128

please, do them on HN _and_ in VE too.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12351 is a reply to message #12350] Wed, 25 April 2007 15:06 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
nslookup google.com 208.67.222.222 on HN:
Server:         208.67.222.222
Address:        208.67.222.222#53

Non-authoritative answer:
Name:   google.com
Address: 72.14.207.99
Name:   google.com
Address: 64.233.187.99
Name:   google.com
Address: 64.233.167.99


nslookup google.com 195.85.81.128 on HN:
;; connection timed out; no servers could be reached



nslookup google.com 208.67.222.222 on VE:
;; connection timed out; no servers could be reached


nslookup google.com 195.85.81.128 on VE:
;; connection timed out; no servers could be reached

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12352 is a reply to message #12351] Wed, 25 April 2007 15:19 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Seems that there is a firewall on 208.67.222.222 or on some node between your HN and DNS. Can you check that?

For example you can stop all VEs, change IP address of your HN (147.86.124.80) to 147.86.124.81 temporary (VE's current IP) and try to do
nslookup google.com 208.67.222.222
on HN again.

Thanks/

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12353 is a reply to message #12352] Wed, 25 April 2007 15:31 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
There are 2 internal DNS which I tried in HN and VE: same effect. There is no Firewall between those DNS and this machine.

nslookup google.com 208.67.222.222 from HN when HN is .124.81 works perfect.

The two internal DNS I tried are 147.86.80.20 and 147.86.80.21.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12354 is a reply to message #12353] Wed, 25 April 2007 15:51 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Ohhh... Something strange is happening in this world! =)

Ok, please, do the following: stop all VEs except the on in question. Start "tcpdump -n -i venet0" on HN and after that do
"nslookup google.com 208.67.222.222" on HN. Then post the output of tcpdump here.

Thanks.

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12396 is a reply to message #12354] Fri, 27 April 2007 06:25 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
tcpdump gives no output when I do that, except of this message at start time:

tcpdump: WARNING: arptype 65535 not supported by libpcap - falling back to cooked socket
tcpdump: WARNING: venet0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on venet0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes


BTW: I had to change /etc/sysconfig/network-scripts/ifcfg-venet0 from BOOTPROTO=dhcp to BOOTPROTO=static

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12397 is a reply to message #12396] Fri, 27 April 2007 06:52 Go to previous messageGo to next message
goeldi
Messages: 92
Registered: June 2006
Member
Now it works, when I boot with a deactivated iptables. When I boot WITH iptables enabled and stop it afterwards, it doesn't. I think there is an issue with ip_conntracks which is not cleanly unloaded. Problem is: when I start iptables, it tells me:

 /sbin/service iptables start
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: mangle filter             [  OK  ]
Unloading iptables modules:                                [FAILED]
Applying iptables firewall rules:                          [  OK  ]
Loading additional iptables modules: ip_conntrack_netbios_n[  OK  ]



When I stop it:

/sbin/service iptables stop
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: mangle filter             [  OK  ]
Unloading iptables modules:                                [FAILED]



dmesg:
ip_conntrack: parameter ip_conntrack_enable_ve0 is obsoleted. In ovzkernel >= 2.6.15 connection tracking on hardware node is enabled by default, use ip_conntrack_disable_ve0=1 parameter to disable.
ip_conntrack version 2.4 (8190 buckets, 65520 max) - 232 bytes per conntrack
VE: 481: started
eth0: no IPv6 routers present
lo: Disabled Privacy Extensions



And I get sporadic kernel panics:
index.php?t=getfile&id=330&private=0

Report message to a moderator

Re: OpenSuSE precreated no connectiviy [message #12433 is a reply to message #12397] Sat, 28 April 2007 06:08 Go to previous message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Thank you for investigating, can you fill two bugs, please:

1st: if iptables are loaded during start up then DNS doesn't work after rules are flushed. Please, don't forget to add there information about kernel version and _rules_ that are in iptables on startup!

2nd: with kernel crash and when it happens.


Thank you,
your help is very appreciated,
Vasily

Report message to a moderator

Previous Topic: vzyum public key error
Next Topic: *SOLVED* Memory usage query
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Wed Aug 14 02:05:43 GMT 2024

Total time taken to generate the page: 0.02937 seconds
Powered by FUDforum Powered by Virtuozzo Containers