OpenVZ Forum: Support » private ip for host-to-ve communication only

Home » General » Support » private ip for host-to-ve communication only

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: private ip for host-to-ve communication only [message #7471 is a reply to message #7470]

Sat, 14 October 2006 07:28

nikb
Messages: 4
Registered: October 2006

Junior Member

That was helpful, thanks.

My servers (both HN and VEs) are debian setups, so you can configure
ipv4 forwarding both in sysctl.conf and in /etc/network/options.

I had it turned off in the options-file but turned on (by the openvz-installation) in sysctl.conf. Turns out sysctl.conf prevailed, and it was thus turned on:

hardwarenode:~# cat /proc/sys/net/ipv4/ip_forward
1

OK, but now lets make things a little more difficult: My HN is also hosting a
regular ve with a regular, routeable external ip that, of course, should remain
reacheable from outside. So I really cannot turn off ip forwarding altogether.
Any idea how I could disable forwarding for one specific subnet or maybe just for interface venetXXX?

On top of that - I dont even think that regular data got routed out of my eth0 - I think my provider really just picked up arp packets.

But right now, I`m even lacking a proper way to find out what exactly is leaving my HN. Probably should look into it with tcpdump.

Report message to a moderator

[Message index]

		private ip for host-to-ve communication only By: nikb on Fri, 13 October 2006 12:51
		Re: private ip for host-to-ve communication only By: John Kelly on Fri, 13 October 2006 16:02
		Re: private ip for host-to-ve communication only By: nikb on Fri, 13 October 2006 16:31
		Re: private ip for host-to-ve communication only By: John Kelly on Fri, 13 October 2006 16:55
		Re: private ip for host-to-ve communication only By: nikb on Fri, 13 October 2006 22:10
		Re: private ip for host-to-ve communication only By: Vasily Tarasov on Sat, 14 October 2006 07:00
		Re: private ip for host-to-ve communication only By: nikb on Sat, 14 October 2006 07:28
		Re: private ip for host-to-ve communication only By: Vasily Tarasov on Sun, 15 October 2006 16:14
		Re: private ip for host-to-ve communication only By: John Kelly on Mon, 16 October 2006 16:07

Previous Topic:	how to write a config file?
Next Topic:	dual nic environment

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sat Feb 21 14:41:56 GMT 2026

Total time taken to generate the page: 0.75225 seconds