<div class="gmail_quote">On Thu, Aug 26, 2010 at 7:59 AM, Dietmar Maurer <span dir="ltr"><<a href="mailto:dietmar@proxmox.com">dietmar@proxmox.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div lang="DE-AT" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;color:#1F497D">Please can you post your network configuration /etc/network/interfaces</span></p><div><div></div><div class="h5">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;color:#1F497D"> </span></p></div></div></div></div></blockquote><div><br></div><div><div># network interface settings</div><div>auto lo</div><div>iface lo inet loopback</div>
<div><br></div><div>iface eth0 inet manual</div><div><br></div><div>iface eth1 inet manual</div><div><br></div><div>auto eth2</div><div>iface eth2 inet static</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>address 10.0.10.3</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>netmask 255.255.255.0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>mtu 9000</div><div><br></div><div>auto eth3</div><div>iface eth3 inet static</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>address 10.10.0.3</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>netmask 255.255.255.0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>mtu 9000</div>
<div><br></div><div><br></div><div>iface eth5 inet manual</div><div><br></div><div>auto vmbr0</div><div>iface vmbr0 inet static</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>address 77.246.179.77</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>netmask 255.255.255.0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>gateway 77.246.179.7</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_ports eth0</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_stp off</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_fd 0</div><div><br></div><div>auto vmbr1</div><div>iface vmbr1 inet static</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>address 10.0.0.3</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>netmask 255.255.255.0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_ports eth1</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_stp off</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bridge_fd 0</div></div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div lang="DE-AT" link="blue" vlink="purple"><div><div><div class="h5">
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">After restarting a HN3 It doesn't connect
to my sql-server anymore (sql-server is an OVZ container that lives on HN3,
connections from HN1 or HN2 to sql-server work fine). </span>The reason seems
to be network related. </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">HN3: <a href="http://77.2.179.77/24" target="_blank">77.2.179.77/24</a></p>
</div>
<div>
<p class="MsoNormal">sql-server: <a href="http://77.2.179.120/24" target="_blank">77.2.179.120/24</a>
(remember, it lives on HN3)</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">lets do a ping, from HN3 to sql-server container</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">HN3:~# ping 77.2.179.120</p>
</div>
<div>
<p class="MsoNormal">PING 77.2.179.120 (77.2.179.120) 56(84) bytes of data.</p>
</div>
<div>
<p class="MsoNormal">64 bytes from <a href="http://77.2.179.120" target="_blank">77.2.179.120</a>:
icmp_seq=1 ttl=64 time=0.043 ms</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Seems to work fine, but when we use tcpdump to examine that
ping, we get this:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">HN3:~# tcpdump ip proto 1 -i venet0</p>
</div>
<div>
<p class="MsoNormal">16:07:15.175602 IP 10.0.10.3 > <a href="http://77.2.179.120" target="_blank">77.2.179.120</a>: ICMP echo request, id 33323, seq
28, length 64</p>
</div>
<div>
<p class="MsoNormal">16:07:15.175623 IP 77.2.179.120 > <a href="http://10.0.10.3" target="_blank">10.0.10.3</a>: ICMP echo reply, id 33323, seq 28, length
64</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Why HN3 use 10.0.10.3 src ip address instead of 77.2.179.77
? At least it's what 'ip ro' say: </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">HN3:~# ip ro</p>
</div>
<div>
<p class="MsoNormal">10.0.0.20 dev venet0 scope link </p>
</div>
<div>
<p class="MsoNormal">77.2.179.122 dev venet0 scope link </p>
</div>
<div>
<p class="MsoNormal">77.2.179.120 dev venet0 scope link </p>
</div>
<div>
<p class="MsoNormal">77.2.179.126 dev venet0 scope link </p>
</div>
<div>
<p class="MsoNormal">77.2.179.125 dev venet0 scope link </p>
</div>
<div>
<p class="MsoNormal"><a href="http://10.0.0.0/24" target="_blank">10.0.0.0/24</a> dev vmbr1
proto kernel scope link src 10.0.0.3 </p>
</div>
<div>
<p class="MsoNormal"><a href="http://77.2.179.0/24" target="_blank">77.2.179.0/24</a> dev vmbr0
proto kernel scope link src 77.2.179.77 </p>
</div>
<div>
<p class="MsoNormal"><a href="http://10.10.0.0/24" target="_blank">10.10.0.0/24</a> dev eth3
proto kernel scope link src 10.10.0.3 </p>
</div>
<div>
<p class="MsoNormal"><a href="http://10.0.10.0/24" target="_blank">10.0.10.0/24</a> dev eth2
proto kernel scope link src 10.0.10.3 </p>
</div>
<div>
<p class="MsoNormal">default via 77.2.179.7 dev vmbr0 </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">packets to <a href="http://77.2.179.0/24" target="_blank">77.2.179.0/24</a>
must use 77.2.179.77 as src address.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">What is that I'm missing? Maybe "venet" doesn't
look 'ip ro' table? How could I force a correct src address for the ip packets
to my sql-server?</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Note:</p>
</div>
<div>
<p class="MsoNormal">packet src addr from others HN are correct:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">16:25:53.535392 IP 77.2.179.75 > <a href="http://77.2.179.120" target="_blank">77.2.179.120</a>: ICMP echo request, id 6748, seq 4,
length 64</p>
</div>
<div>
<p class="MsoNormal">16:25:53.535423 IP 77.2.179.120 > <a href="http://77.2.179.75" target="_blank">77.2.179.75</a>: ICMP echo reply, id 6748, seq 4,
length 64</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">br Marc</p>
</div>
</div>
</div>
</div>
</div></div></div>
</div>
</blockquote></div><br><br clear="all"><br>-- <br>Marc<br>