OpenVZ Forum


Home » General » Support » NIC dedicated for accessing VEs from internet
NIC dedicated for accessing VEs from internet [message #29786] Thu, 24 April 2008 15:33 Go to next message
mangust is currently offline  mangust
Messages: 39
Registered: April 2008
Location: USA
Member
Tryed today to make a solution different ways without great success. Even small one.
We have server, it has 2 NICs. eth0 have private IP. VEs that have IP from same private network accesseble. Default gateway on router in private network.
I have another internet connection (2nd NIC), router of a provider, and public network/29, 8addresses, 6 usable, one belongs to provider's router.
Now. I m giving IPs to VEs. dosn't work. I can see it only from priate network, if assigning one of this public IP on computer in private network.
I can't write even a route to that public default gateway, becouse it is unreachable (because there is NO ip address assigned on public NIC)
Is there a way to access VEs via interface that don't have IP? bridge? can't add even to bridge:

[root@trinity ~]# brctl addif br0 venet0
can't add venet0 to bridge br0: Invalid argument

[Updated on: Thu, 24 April 2008 15:36]

Report message to a moderator

Re: NIC dedicated for accessing VEs from internet [message #29790 is a reply to message #29786] Thu, 24 April 2008 18:11 Go to previous messageGo to next message
mangust is currently offline  mangust
Messages: 39
Registered: April 2008
Location: USA
Member
ooops. more likely this was a solution for us.
http://wiki.openvz.org/Using_private_IPs_for_Hardware_Nodes
Re: NIC dedicated for accessing VEs from internet [message #29814 is a reply to message #29786] Fri, 25 April 2008 09:36 Go to previous message
mangust is currently offline  mangust
Messages: 39
Registered: April 2008
Location: USA
Member
variant with veth interface works, but i still want to try venet0. Today investigated more.
i did:
[root@trinity ~]# ifconfig eth1 up
[root@trinity ~]# ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:1E:4F:2D:F1:65  
          inet6 addr: fe80::21e:4fff:fe2d:f165/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 b)  TX bytes:250 (250.0 b)
          Interrupt:169 Memory:f4000000-f4012100 

[root@trinity ~]# /sbin/ip rule add from 62.15.232.178 table 100
[root@trinity ~]# ip rule show
0:      from all lookup 255 
32765:  from 62.15.232.178 lookup 100 
32766:  from all lookup main 
32767:  from all lookup default 
[root@trinity ~]# ip route add default dev eth1 via 62.15.232.182 table 100
RTNETLINK answers: Network is unreachable
[root@trinity ~]# ip route add 62.15.232.176/29 dev eth1
RTNETLINK answers: No such device
[root@trinity ~]# ifconfig eth1 inet 191.255.254.5
[root@trinity ~]# ip route add 62.15.232.176/29 dev eth1
[root@trinity ~]# ip route add default dev eth1 via 62.15.232.182 table 100
[root@trinity ~]# tcpdump -ni eth1 | grep -v 802.1d
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
11:23:56.046077 IP 62.44.79.180 > 62.15.232.178: ICMP echo request, id 63836, seq 0, length 64
11:23:56.047219 arp who-has 62.15.232.182 tell 191.255.254.5
11:23:57.045108 IP 62.44.79.180 > 62.15.232.178: ICMP echo request, id 63836, seq 1, length 64
11:23:57.047504 arp who-has 62.15.232.182 tell 191.255.254.5
11:23:58.044590 IP 62.44.79.180 > 62.15.232.178: ICMP echo request, id 63836, seq 2, length 64
11:23:58.047710 arp who-has 62.15.232.182 tell 191.255.254.5
11:23:59.045492 IP 62.44.79.180 > 62.15.232.178: ICMP echo request, id 63836, seq 3, length 64
11:24:00.046463 IP 62.44.79.180 > 62.15.232.178: ICMP echo request, id 63836, seq 4, length 64
11:24:00.047001 arp who-has 62.15.232.182 tell 191.255.254.5
11:24:01.047267 arp who-has 62.15.232.182 tell 191.255.254.5
1


To add a route i first need to add a network.
To add a network kernel want to see any IP address i gave some not existant.
Ping from outside not going Sad
Computer want to determine routers MAC by ARP and request it from that not real 191.255.254.5 Sad
I don't want any IP on interface! Why not to use VE ip address for ARP? Sad
If i add public address on that external NIC everithing working. but i don't need this IP for HW node, i will need to not to forget close it by firewall, tell services like ssh not to listen on it, finally i can't use it for VE Sad

[Updated on: Fri, 25 April 2008 10:13]

Report message to a moderator

Previous Topic: unfs3 in a ve and syslog errors
Next Topic: Support for 3ware 9690SA
Goto Forum:
  


Current Time: Thu Feb 02 18:26:16 GMT 2023

Total time taken to generate the page: 0.00746 seconds