From: Jean-Marc Pigeon (jmp_at_safe.ca)
Date: Sun 30 Jan 2005 - 01:15:20 GMT
Bonjour Herbert Poetzl,
I was successful to compile 2.6.11-rc2-vs1.9.4-rc3-ng8.12,
it is almost working as (I) expected...
reliability is a little bit shaky (but this could
be related to me not fully mastering the 'beast').
I defined a vserver with an 'lo' and 'eth0',
'eth0' is set with a public IP number such I expect
to reach Internet from vserver.
vserver 'lo' interface is defined, is not mixed up
with mserver 'lo' interface (test show 127.0.0.2
on mserver IS NOT 127.0.0.2 on vserver... good).
once defined vserver 'eth0' is pingable FROM
mserver, but NOT from another system on the same
network...
mserver 'eth0' is NOT pingable from vserver
(Network is unreachable).
If I manually set route such as:
/sbin/route -v add -net IP.PUBLIC.NETWORK.0/24 dev eth0
then vserver is NOT pingable anymore from mserver (HOST unreachable)
ping is almost working from the vserver side, tcpdump
show packet reaching targeted system, but targeted system
not being able to reply back, as if vserver ARP NOT providing
needed information.
Is my understanding correct?, once defined by 'vnet' and
handle by iptables, such as...
(
vnet -x $XID -n ${XID}0 -d lo
vnet -x $XID -n ${XID}1 -d eth0 -D en0
iptables -t vnet -A PREROUTING -d $VIP -j VNET --vnet ${XID}1
iptables -t vnet -A OUTPUT -s $VIP -j VNET --vnet ${XID}1
)
we should be able to run
->service network start<-
on the vserver side, right??
Here there is some complains I am getting from
the vserver side:
(
Setting network parameters: error: unknown error 1 setting key 'net.ipv4.ip_forward'
error: unknown error 1 setting key 'net.ipv4.conf.default.rp_filter'
error: unknown error 1 setting key 'net.ipv4.conf.default.accept_source_route'
error: unknown error 1 setting key 'kernel.sysrq'
error: unknown error 1 setting key 'kernel.core_uses_pid'
)
Obviously ifup and Co need to be adjusted...
Does somebody can give me a hint about, how to make
vserver 'eth0' getting ping reply from the rest of the world???
Could somebody confirm he was successful with such test?
Thank for your time and 'bravo!' for ng near to be working...
A bientot
--
==========================================================================
Jean-Marc Pigeon Internet: Jean-Marc.Pigeon_at_safe.ca
SAFE Inc. Phone: (514) 493-4280 Fax: (514) 493-1946
REGULUS, a real time accounting/billing package for ISP
REGULUS' Home base <"http://www.regulus.safe.ca">
==========================================================================
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver