OpenVZ Forum


Home » General » Support » *solved* OpenVZ on CentOS 5 network issues
Re: OpenVZ on CentOS 5 network issues [message #15838 is a reply to message #15837] Wed, 15 August 2007 02:25 Go to previous messageGo to previous message
dowdle is currently offline  dowdle
Messages: 261
Registered: December 2005
Location: Bozeman, Montana
Senior Member
I don't quite understand what you are saying with problem 1.

What I do with /etc/sysctl.conf is:

mv /etc/sysctl.conf /etc/sysctl.conf.factory
nano -w /etc/sysctl.conf

Paste in the lines shown on the Quick install quide:

# On Hardware Node we generally need
# packet forwarding enabled and proxy arp disabled
net.ipv4.ip_forward = 1
net.ipv4.conf.default.proxy_arp = 0
# Enables source route verification
net.ipv4.conf.all.rp_filter = 1
# Enables the magic-sysrq key
kernel.sysrq = 1
# TCP Explict Congestion Notification
#net.ipv4.tcp_ecn = 0
# we do not want all our interfaces to send redirects
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.all.send_redirects = 0

Save it out. Please copy and paste from the guide as it might wrap funny here.

Note that if that value gets set more than once, it takes whatever it was last set to. In the end, you want forwarding = 1. While it is used by OpenVZ, it really isn't an openvz specific thing. My guess is that set the value to 1 at the top of the sysctl.conf and later set it to 0... and it keeps the later value. In any event, it should be set to 1. Moving the original file and pasting in the lines shown on the quick start guide makes sure it is set correctly.

- - - -

Now I have to ask a question. You have a hosting provider that is giving you multiple IP addresses. Are you sure those addresses are being routed to your physical box? Do a traceroute for the IP address of the hardware node and the other addresses. They should all have the same last hop and if they don't it is a routing issue your hosting provider will have to fix.

- - - -

After you have your VPSes installed and running... stop iptables on the hardware node just to make sure it isn't in the way. If stopping it makes everything work, you know it is a firewall issue you need to fix.

- - - -

Other than that, we've kinda been spinning in circles going over and over the same stuff. To get past that, I'd like to have root access to the hardware node so I can poke at it.

I've setup openvz a few dozen times and never really run into a problem that wasn't resolved by the methods I mentioned above. Oh, you do have SELINUX turned off in the hardware node, right?


--
TYL, Scott Dowdle
Belgrade, Montana, USA
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: change inode_soft_limit
Next Topic: Problematic Hard Disk - Read Only Mode
Goto Forum:
  


Current Time: Mon Jun 30 14:18:48 GMT 2025

Total time taken to generate the page: 0.04565 seconds