Home » General » Support » iptables fail in CT lastest OVZ kernel
| Re: kernel module load fail [message #33588 is a reply to message #33549] |
Fri, 24 October 2008 05:59   |
locutius
Messages: 125
Registered: August 2007
|
Senior Member |
|
|
node A (apf working in both HN and CT)
[root]# lsmod
Module Size Used by
vzethdev 16136 0
simfs 9068 55
vzrst 139156 0
vzcpt 114596 0
tun 15872 2 vzrst,vzcpt
vzdquota 44308 55 [permanent]
xt_tcpudp 7040 219
ip_nat_ftp 7808 0
xt_state 6144 28
xt_length 6016 0
ipt_ttl 5888 0
xt_tcpmss 6272 0
ipt_TCPMSS 8064 2
iptable_mangle 8576 57
xt_multiport 7168 8
xt_limit 6656 0
ipt_LOG 10240 0
ipt_TOS 6272 28
ipt_tos 5760 0
ipt_REJECT 9344 4
iptable_nat 13316 110
iptable_filter 8576 57
ip_nat 22288 3 vzrst,ip_nat_ftp,iptable_nat
ip_conntrack 60356 61 vzrst,vzcpt,ip_nat_ftp,xt_state,iptable_nat,ip_nat
nfnetlink 10648 2 ip_nat,ip_conntrack
ip_tables 18760 3 iptable_mangle,iptable_nat,iptable_filter
x_tables 19204 14 xt_tcpudp,xt_state,xt_length,ipt_ttl,xt_tcpmss,ipt_TCPMSS,xt _multiport,xt_limit,ipt_LOG,ipt_TOS,ipt_tos,ipt_REJECT,iptab le_nat,ip_tables
autofs4 25220 2
vznetdev 21764 110
vzmon 46984 59 vzethdev,vzrst,vzcpt,vznetdev
ipv6 262048 504 vzrst,vzcpt,vzmon
vzdev 7556 4 vzethdev,vzdquota,vznetdev,vzmon
dm_mirror 28804 0
dm_multipath 21384 0
dm_mod 58776 2 dm_mirror,dm_multipath
video 19588 0
sbs 18468 0
backlight 9984 0
i2c_ec 8960 1 sbs
i2c_core 23552 1 i2c_ec
container 8320 0
button 10512 0
battery 13700 0
asus_acpi 19480 0
ac 9092 0
parport_pc 29092 0
lp 16168 0
parport 37960 2 parport_pc,lp
sg 35740 0
serio_raw 10628 0
ide_cd 39968 0
bnx2 155032 0
pcspkr 7040 0
cdrom 38048 1 ide_cd
ata_piix 18436 0
libata 116280 1 ata_piix
megaraid_sas 32048 3
sd_mod 24832 4
scsi_mod 133132 4 sg,libata,megaraid_sas,sd_mod
ext3 124424 2
jbd 61736 1 ext3
uhci_hcd 25356 0
ohci_hcd 23324 0
ehci_hcd 33036 0
/etc/sysconfig/vz-scripts/101.conf
# Configuration file generated by vzsplit for 2 VEs
# on HN with total amount of physical mem 8103 Mb
# low memory 811 Mb, swap size 10001 Mb, Max treads 8000
# Resourse commit level 0:
# Free resource distribution. Any parameters may be increased
# Primary parameters
NUMPROC="4000:4000"
AVNUMPROC="1039:1039"
NUMTCPSOCK="4000:4000"
NUMOTHERSOCK="4000:4000"
VMGUARPAGES="1244660:2147483647"
# Secondary parameters
KMEMSIZE="1073741824:1073741824"
TCPSNDBUF="11995682:28379682"
TCPRCVBUF="11995682:28379682"
OTHERSOCKBUF="5997841:22381841"
DGRAMRCVBUF="5997841:5997841"
OOMGUARPAGES="1244660:2147483647"
PRIVVMPAGES="1244660:1369126"
# Auxiliary parameters
LOCKEDPAGES="4157:4157"
SHMPAGES="124466:124466"
PHYSPAGES="0:2147483647"
NUMFILE="33248:33248"
NUMFLOCK="1000:1100"
NUMPTY="400:400"
NUMSIGINFO="1024:1024"
DCACHESIZE="18593056:19150848"
NUMIPTENT="1600:1600"
DISKSPACE="10485760:10485760"
DISKINODES="7469229:8216152"
CPUUNITS="399024"
VE_ROOT="/vz/root/$VEID"
VE_PRIVATE="/vz/private/$VEID"
OSTEMPLATE="centos-5-i386-default"
ORIGIN_SAMPLE="2split"
ONBOOT="no"
NAMESERVER="xxx.xxx.xxx.xxx"
IP_ADDRESS="xxx.xxx.xxx.xxx"
HOSTNAME="www.xxxxx.com"
/etc/vz/vz.conf
## Global parameters
VIRTUOZZO=yes
LOCKDIR=/vz/lock
DUMPDIR=/vz/dump
VE0CPUUNITS=1000
## Logging parameters
LOGGING=yes
LOGFILE=/var/log/vzctl.log
LOG_LEVEL=10
VERBOSE=0
## Disk quota parameters
DISK_QUOTA=yes
VZFASTBOOT=no
# The name of the device whose ip address will be used as source ip for VE.
# By default automatically assigned.
#VE_ROUTE_SRC_DEV="eth0"
# Controls which interfaces to send ARP requests and modify APR tables on.
NEIGHBOUR_DEVS=all
## Template parameters
TEMPLATE=/vz/template
## Defaults for VEs
VE_ROOT=/vz/root/$VEID
VE_PRIVATE=/vz/private/$VEID
CONFIGFILE="vps.basic"
DEF_OSTEMPLATE="fedora-core-4"
## Load vzwdog module
VZWDOG="no"
## IPv4 iptables kernel modules
#IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"
IPTABLES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp"
## Enable IPv6
IPV6="no"
## IPv6 ip6tables kernel modules
IP6TABLES="ip6_tables ip6table_filter ip6table_mangle ip6t_REJECT"
node B (apf working in HN but not CT)
[root]# lsmod
vzethdev 16136 0
vznetdev 21124 4
simfs 9068 2
vzrst 141844 0
vzcpt 114724 0
tun 15872 2 vzrst,vzcpt
vzmon 49804 6 vzethdev,vznetdev,vzrst,vzcpt
ip_nat_ftp 7808 0
iptable_nat 13316 4
ip_nat 22288 3 vzrst,ip_nat_ftp,iptable_nat
xt_length 6016 0
ipt_ttl 5888 0
xt_tcpmss 6272 0
ipt_LOG 10240 0
ipt_tos 5760 0
vzdquota 45204 2 [permanent]
xt_tcpudp 7040 122
xt_state 6144 16
ipt_TCPMSS 8064 1
iptable_mangle 8576 3
xt_multiport 7168 4
xt_limit 6656 6
ipt_TOS 6272 18
ipt_REJECT 9344 2
ip_conntrack 60356 8 vzrst,vzcpt,ip_nat_ftp,iptable_nat,ip_nat,xt_state
iptable_filter 8576 3
nfnetlink 10648 2 ip_nat,ip_conntrack
ip_tables 18760 3 iptable_nat,iptable_mangle,iptable_filter
x_tables 19204 14 iptable_nat,xt_length,ipt_ttl,xt_tcpmss,ipt_LOG,ipt_tos,xt_t cpudp,xt_state,ipt_TCPMSS,xt_multiport,xt_limit,ipt_TOS,ipt_ REJECT,ip_tables
ipv6 269824 25 vzrst,vzcpt,vzmon
xfrm_nalgo 13700 1 ipv6
crypto_api 11904 1 xfrm_nalgo
vzdev 7556 4 vzethdev,vznetdev,vzmon,vzdquota
dm_mirror 29188 0
dm_multipath 22024 0
dm_mod 62108 2 dm_mirror,dm_multipath
video 21640 0
sbs 18468 0
backlight 9984 1 video
i2c_ec 8960 1 sbs
i2c_core 23552 1 i2c_ec
container 8320 0
button 10512 0
battery 13700 0
asus_acpi 19480 0
ac 9092 0
parport_pc 29092 0
lp 16168 0
parport 37960 2 parport_pc,lp
sg 35868 0
ide_cd 39968 0
pcspkr 7040 0
bnx2 138780 0
i5000_edac 12416 0
edac_mc 26192 1 i5000_edac
cdrom 38048 1 ide_cd
serio_raw 10628 0
ata_piix 22276 0
libata 144700 1 ata_piix
mptsas 37512 3
mptscsih 36864 1 mptsas
mptbase 75812 2 mptsas,mptscsih
scsi_transport_sas 30464 1 mptsas
sd_mod 24832 4
scsi_mod 135180 6 sg,libata,mptsas,mptscsih,scsi_transport_sas,sd_mod
ext3 124552 2
jbd 61736 1 ext3
uhci_hcd 25356 0
ohci_hcd 23324 0
ehci_hcd 33676 0
/etc/sysconfig/vz-scripts/101.conf
# Configuration file generated by vzsplit for 2 VEs
# on HN with total amount of physical mem 2020 Mb
# low memory 872 Mb, swap size 4000 Mb, Max treads 8000
# Resourse commit level 0:
# Free resource distribution. Any parameters may be increased
# Primary parameters
NUMPROC="4000:4000"
AVNUMPROC="1117:1117"
NUMTCPSOCK="4000:4000"
NUMOTHERSOCK="4000:4000"
VMGUARPAGES="340736:2147483647"
# Secondary parameters
KMEMSIZE="91529625:100682587"
TCPSNDBUF="279131136:410203136"
TCPRCVBUF="279131136:410203136"
OTHERSOCKBUF="279131136:410203136"
DGRAMRCVBUF="279131136:410203136"
OOMGUARPAGES="340736:2147483647"
PRIVVMPAGES="255999744:255999744"
# Auxiliary parameters
LOCKEDPAGES="4469:4469"
SHMPAGES="340736:340736"
PHYSPAGES="0:2147483647"
NUMFILE="35744:35744"
NUMFLOCK="1000:1100"
NUMPTY="400:400"
NUMSIGINFO="1024:1024"
DCACHESIZE="19988877:20588544"
NUMIPTENT="200:200"
DISKSPACE="3145728:3145728"
DISKINODES="1572864:1572864"
CPUUNITS="155175"
VE_ROOT="/vz/root/$VEID"
VE_PRIVATE="/vz/private/$VEID"
OSTEMPLATE="centos-5-i386-default"
ONBOOT="yes"
NAMESERVER="xxx.xxx.xxx.xxx"
HOSTNAME="www.xxxx.com"
IP_AD
...
[Updated on: Fri, 24 October 2008 06:34] Report message to a moderator |
|
|
|
Current Time: Mon Oct 07 05:57:07 GMT 2024
Total time taken to generate the page: 0.04811 seconds
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
