OpenVZ Forum


Home » General » Support » VE Missing /proc/net/ip_conntrack
VE Missing /proc/net/ip_conntrack [message #34781] Mon, 02 February 2009 18:05 Go to next message
rickb is currently offline  rickb
Messages: 368
Registered: October 2006
Senior Member
I have enabled connection tracking on the HN everywhere I know and ensured the module is loaded:

Quote:

[root@vps1 ~]# uname -r
2.6.18-92.1.18.el5.028stab060.2

[root@vps1 ~]# grep conn /etc/sysconfig/vz
IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ip_conntrack_ftp ipt_conntrack ip_tables ip_conntrack_netbios_ns"

[root@vps1 ~]# grep conn /etc/sysconfig/iptables-config
IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp"

[root@vps1 ~]# lsmod | grep conn
ip_conntrack_netbios_ns 35968 0
ip_conntrack 101012 5 vzrst,ip_nat,vzcpt,ip_conntrack_netbios_ns,xt_state
nfnetlink 40392 2 ip_nat,ip_conntrack

[root@vps1 ~]# grep IPT /etc/sysconfig/vz-scripts/42007.conf
IPTENTRIES="3000:4000"
IPTABLES_MODULES="ipt_REJECT ipt_tos ipt_TOS ipt_LOG ip_conntrack ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ip_conntrack_ftp ipt_conntrack ip_tables ip_conntrack_netbios_n





connection tracking not available in VE:
Quote:


[root@vps1 ~]# vzctl exec 42007 ls -al /proc/net/ip_conntrack
ls: /proc/net/ip_conntrack: No such file or directory
[root@vps1 ~]#




I have restarted the VE, vz, and the node. Any help is greatly appreciated.


-------------
Common Terms I post with: http://wiki.openvz.org/Category:Definitions

UBC. Learn it, love it, live it: http://wiki.openvz.org/Proc/user_beancounters
Re: VE Missing /proc/net/ip_conntrack [message #34794 is a reply to message #34781] Tue, 03 February 2009 07:49 Go to previous messageGo to next message
maratrus is currently offline  maratrus
Messages: 1495
Registered: August 2007
Location: Moscow
Senior Member
Hello,

seems ip_conntrack is virtualized itself and should be workable but it's simply /proc/net/ip_conntrack file is not virtualized. I don't know why, may be nobody wants to use it. Anyway if you have any argumentations I think it worth filing a bug with feature request.
Re: VE Missing /proc/net/ip_conntrack [message #34825 is a reply to message #34794] Wed, 04 February 2009 21:13 Go to previous messageGo to next message
rickb is currently offline  rickb
Messages: 368
Registered: October 2006
Senior Member
Thanks for the reply, but /proc/net/ip_conntrack exists in many other VEs in other servers. the problem here must be due to some configuration. Do you have any other ideas for me?



-------------
Common Terms I post with: http://wiki.openvz.org/Category:Definitions

UBC. Learn it, love it, live it: http://wiki.openvz.org/Proc/user_beancounters
Re: VE Missing /proc/net/ip_conntrack [message #34827 is a reply to message #34825] Thu, 05 February 2009 06:41 Go to previous message
maratrus is currently offline  maratrus
Messages: 1495
Registered: August 2007
Location: Moscow
Senior Member
Hello,

could you possibly specify kernels which have ip_conntrack inside VE and which don't have of course except 2.6.18-92.1.18.el5.028stab060.2 because you've also mentioned about it.
And if it is possible briefly describe their configuration as you did in the first post.
Previous Topic: can't start slapd in a VE
Next Topic: processor name is not correct
Goto Forum:
  


Current Time: Sat Feb 04 09:42:41 GMT 2023

Total time taken to generate the page: 0.00784 seconds