networking setup problem

DISCUSSION paolo pedaletti 4 participants 10 messages Jul 16, 2008 – Jul 21, 2008 KVM

lore

Share & tools

lore

paolo pedaletti

author

2008-07-16 09:30 UTC #0 lore raw

Hi,
I hope this is the right ml to submit my problem.

Abstract: I can't setup 2 different network inside my VMs, one public and one private.

Scheme:

      eth0 ---------
 ---------| proxy |---eth1
 |        ---------  |
H|                   |
O|   eth0 ---------  |
S|--------| web   |--|eth1
T|        ---------  |
 |                   |
 |   eth0 ---------  |
 |--------| db    |---eth1
          ---------

this is a "classic" LAMP, sparse on 3 VM

1) front end, proxy (apache2 in reverse with mod-security)
2) application server, web (apache2 + php5)
3) database (mysql5)

(it's a test/backup environment)

each VM must have 2 network card:
eth0 on the local network, in bridge with the host physical eth0 eth1 on the virtual private network, for internal communications between them

saying that, ... it doesn't work :-(
(linux ubuntu 8.04 2.6.24-19-generic, kvm-62)

these are the command lines:

kvm -name PROXY
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139

	-net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
	-net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh

-drive index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap

kvm -name WEBAPP
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139

	-net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
	-net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh

-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap

kvm -name DB
-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139

	-net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
	-net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh

-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

$ cat /etc/qemu-ifup
-----------------8<-----------------8<----------------8<--------------
#!/bin/sh
set -x

echo "Executing $0"

case $1 in
tap*) echo "tun network"
BRIDGE=br0

	if [ -z "$(ifconfig $BRIDGE)" ] ; then
		/usr/sbin/brctl addbr $BRIDGE
		dhclient $BRIDGE
	fi
	/usr/sbin/tunctl -u `whoami` -t $1
	echo "Bringing up $1 for bridged mode..."
	/sbin/ifconfig $1 0.0.0.0 promisc up
	/sbin/ip link set $1 up
	sleep 0.5s
	echo "Adding $1 to br0..."
	/usr/sbin/brctl addif $BRIDGE $1
	;;

	dmz*)	echo "dmz network"
 	BRIDGE=br1
	if [ -z "$(ifconfig $BRIDGE)" ] ; then
		/usr/sbin/brctl addbr $BRIDGE
		dhclient $BRIDGE
	fi
	/usr/sbin/tunctl -u `whoami` -t $1
	echo "Bringing up $1 for bridged mode..."
	/sbin/ifconfig $1 0.0.0.0 promisc up
	/sbin/ip link set $1 up
	sleep 0.5s
	echo "Adding $1 to $BRIDGE..."
	/usr/sbin/brctl addif $BRIDGE $1
	;;

	*)   echo "Error: no interface specified or interface '$1' invalid"
        exit 1

esac -----------------8<-----------------8<----------------8<--------------

eth0 works for all the VM, eth1 doesn't.

constrain: no dhcp, all static ip

any suggestion?

thank you in advance.

Signature · 1 line

Paolo Pedaletti

Uri Lublin

2008-07-16 14:00 UTC #1 lore raw

Quoted 57 lines · paolo pedaletti

Hi,
I hope this is the right ml to submit my problem.
Abstract: I can't setup 2 different network inside my VMs, one public and one private.
Scheme:
      eth0 ---------
 ---------| proxy |---eth1
 |        ---------  |
H|                   |
O|   eth0 ---------  |
S|--------| web   |--|eth1
T|        ---------  |
 |                   |
 |   eth0 ---------  |
 |--------| db    |---eth1
          ---------
this is a "classic" LAMP, sparse on 3 VM
1) front end, proxy (apache2 in reverse with mod-security)
2) application server, web (apache2 + php5)
3) database (mysql5)
(it's a test/backup environment)
each VM must have 2 network card:
eth0 on the local network, in bridge with the host physical eth0 eth1 on the virtual private network, for internal communications between them
saying that, ... it doesn't work :-(
(linux ubuntu 8.04 2.6.24-19-generic, kvm-62)
these are the command lines:
kvm -name PROXY
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap
kvm -name WEBAPP
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap
kvm -name DB

Review

Quoted 7 lines

(quoted diff) +0 -5

-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

Does using a different ifname help ?

PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0

Also check route on guests.

Paolo Pedaletti

author

2008-07-20 23:56 UTC #2 lore raw

Ciao Uri:

Quoted 4 lines

Does using a different ifname help ?

PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0

no, it doesn't.

always
destination host unreachable

Quoted 1 line

Also check route on guests.

yes, they are correct, the default to external network eth0 while all eth1 10.0.2.0/24 internal

nothing. :-(

someone has tried a working setup for 2 network connections, one "public" and one "private" ?

thank you.

Signature · 2 lines

/* Paolo Pedaletti,
 * [email protected] www.pedaletti.it */

David Mair

2008-07-21 05:07 UTC #3 lore raw

Quoted 14 lines · Paolo Pedaletti

Ciao Uri:
Quoted 4 lines
Does using a different ifname help ?
PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0
no, it doesn't.
always
destination host unreachable
Quoted 1 line
Also check route on guests.

Quoted 7 lines

yes, they are correct, the default to external network eth0 while all eth1 10.0.2.0/24 internal
nothing. :-(
someone has tried a working setup for 2 network connections, one "public" and one "private" ?

Yes. On this host I have equivalents for all the VMware default networks (vmnet0, vmnet1 and vmnet8). Each of them is built with host tools (brctl, tunctl, host IP stack, ISC dhcpd).

It looks like the -net user and socket listen/connect options do not create shared virtual cabling between more than one and two guests respectively. The documentation implies that because it says that the -net socket mcast option does create a virtual cabling bus you can connect more than two guests to. This might work for you:

kvm -name PROXY
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234

kvm -name WEBAPP
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234

-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap

kvm -name DB
-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234

-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

That's suitable for testing but not for production use IMO. The guest to guest traffic on the vlan=1 NICs may be visible on host public interfaces (tunneled in UDP multicast traffic of course). There will be no DHCP server on the vlan=1 guest NICs unless you install one. For a production environment you'll have to do more work.

Signature · 1 line

David.

Lynn Kerby

2008-07-21 05:22 UTC #4 lore raw

Quoted 49 lines · David Mair

Quoted 8 lines · Paolo Pedaletti
Ciao Uri:
Quoted 4 lines
Does using a different ifname help ?
PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0
no, it doesn't.
always
destination host unreachable
Quoted 6 lines
Quoted 1 line
Also check route on guests.
yes, they are correct, the default to external network eth0 while all eth1 10.0.2.0/24 internal
nothing. :-(
someone has tried a working setup for 2 network connections, one "public" and one "private" ?
Yes. On this host I have equivalents for all the VMware default networks (vmnet0, vmnet1 and vmnet8). Each of them is built with host tools (brctl, tunctl, host IP stack, ISC dhcpd).
It looks like the -net user and socket listen/connect options do not create shared virtual cabling between more than one and two guests respectively. The documentation implies that because it says that the -net socket mcast option does create a virtual cabling bus you can connect more than two guests to. This might work for you:
kvm -name PROXY
(quoted diff) +0 -3
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu- 
server.PROXY.root,boot=on
(quoted diff) +0 -2
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap
kvm -name WEBAPP
(quoted diff) +0 -3
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu- 
server.WEB.root,boot=on
(quoted diff) +0 -2
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap
kvm -name DB
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

Quoted 1 line

That's suitable for testing but not for production use IMO. The guest to guest traffic on the vlan=1 NICs may be visible on host public interfaces (tunneled in UDP multicast traffic of course). There will be no DHCP server on the vlan=1 guest NICs unless you install one. For a production environment you'll have to do more work.

I just noticed in David's post (and went back to yours also) that you are specifying ifname=tap0 for each of the guests. You will need to assign each guest it's *own* tap interface and attach that to the appropriate bridge(s) for this to work.

I'm not familiar with the '-net socket' stuff here, so I don't know what that does for you.

Lynn Kerby

David Mair

2008-07-21 16:14 UTC #5 lore raw

Quoted 52 lines · Lynn Kerby

Quoted 49 lines · David Mair
Quoted 8 lines · Paolo Pedaletti
Ciao Uri:
Quoted 4 lines
Does using a different ifname help ?
PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0
no, it doesn't.
always
destination host unreachable
Quoted 6 lines
Quoted 1 line
Also check route on guests.
yes, they are correct, the default to external network eth0 while all eth1 10.0.2.0/24 internal
nothing. :-(
someone has tried a working setup for 2 network connections, one "public" and one "private" ?
Yes. On this host I have equivalents for all the VMware default networks (vmnet0, vmnet1 and vmnet8). Each of them is built with host tools (brctl, tunctl, host IP stack, ISC dhcpd).
It looks like the -net user and socket listen/connect options do not create shared virtual cabling between more than one and two guests respectively. The documentation implies that because it says that the -net socket mcast option does create a virtual cabling bus you can
connect more than two guests to. This might work for you:
kvm -name PROXY
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap
kvm -name WEBAPP
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap
kvm -name DB
(quoted diff) +0 -5
-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net socket,vlan=1,mcast=230.0.0.1:1234
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

Quoted 5 lines

Quoted 1 line
That's suitable for testing but not for production use IMO. The guest to guest traffic on the vlan=1 NICs may be visible on host public interfaces (tunneled in UDP multicast traffic of course). There will be no DHCP server on the vlan=1 guest NICs unless you install one. For a production environment you'll have to do more work.
I just noticed in David's post (and went back to yours also) that you are specifying ifname=tap0 for each of the guests. You will need to assign each guest it's *own* tap interface and attach that to the appropriate bridge(s) for this to work.
I'm not familiar with the '-net socket' stuff here, so I don't know what that does for you.

It should allow for private guest to guest [virtual] cabling without needing any host configuration. FWIW, I do it the way you do...with a host bridge and a tap for each guest.

Signature · 1 line

David.

Lynn Kerby

2008-07-21 05:14 UTC #6 lore raw

In reply to Paolo Pedaletti

Quoted 14 lines · Paolo Pedaletti

Ciao Uri:
Quoted 4 lines
Does using a different ifname help ?
PROXY:  ifname=tap2 and dmz2
WEBAPP: ifname=tap1 and dmz1
DB:     ifname=tap0 and dmz0
no, it doesn't.
always
destination host unreachable
Quoted 1 line
Also check route on guests.

Quoted 7 lines

yes, they are correct, the default to external network eth0 while all eth1 10.0.2.0/24 internal
nothing. :-(
someone has tried a working setup for 2 network connections, one "public" and one "private" ?

Paolo,

Not quite sure what you mean by your public/private labels. I have a working setup with 2 network connections for several of my KVM guests.

I've got one interface that uses tun/tap devices attached to bridge br0 which also contains the eth0 connection on the host and these guests typically get their IP addresses via DHCP. These guests use interface names starting with tap. For a few of the guests, they have an additional interface that is attached to bridge br1 which connects to my public IP switch. These guests have static address assignments as I only have a handful of external static IPs and these interfaces are named with dmz at the front. The KVM host doesn't have an IP address assigned on the interface that connects to the outside world as I don't really want it to be reachable directly.

It works beautifully, but doesn't use user networking like the startup commands you posted. However, when I went back and looked at your ifup script and the first config you posted, you probably aren't really trying to use user networking for the eth1 interface. You should try replacing the '-net user,' with '-net tap,' on your dmz interfaces and see if that doesn't solve your problem. I use the e1000 nic emulation instead of the rtl8139 (which gave me all kinds of problems about 25 KVM releases ago).

I can post or email you my working config info if you really need it, but I think you are really close to getting this working.

Lynn Kerby

paolo pedaletti

author

2008-07-21 06:43 UTC #7 lore raw

Ciao Lynn:

Quoted 1 line

I can post or email you my working config info if you really need it, but I think you are really close to getting this working.

ok, let me trying few more times ... :-)

thank you for the answer (David Mair too)

Signature · 1 line

Paolo Pedaletti

David Mair

2008-07-16 23:53 UTC #8 lore raw

In reply to paolo pedaletti

Quoted 110 lines · paolo pedaletti

Hi,
I hope this is the right ml to submit my problem.

Abstract: I can't setup 2 different network inside my VMs, one public and one private.

Scheme:

      eth0 ---------
 ---------| proxy |---eth1
 |        ---------  |
H|                   |
O|   eth0 ---------  |
S|--------| web   |--|eth1
T|        ---------  |
 |                   |
 |   eth0 ---------  |
 |--------| db    |---eth1
          ---------

this is a "classic" LAMP, sparse on 3 VM

1) front end, proxy (apache2 in reverse with mod-security)
2) application server, web (apache2 + php5)
3) database (mysql5)

(it's a test/backup environment)

each VM must have 2 network card:
eth0 on the local network, in bridge with the host physical eth0 eth1 on the virtual private network, for internal communications between them

saying that, ... it doesn't work :-(
(linux ubuntu 8.04 2.6.24-19-generic, kvm-62)

these are the command lines:

kvm -name PROXY

(quoted diff) +0 -5

-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap

kvm -name WEBAPP

(quoted diff) +0 -5

-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap

kvm -name DB

(quoted diff) +0 -5

-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net user,vlan=1,ifname=dmz0,script=./qemu-ifup.sh
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap


$ cat /etc/qemu-ifup
-----------------8<-----------------8<----------------8<--------------
#!/bin/sh
set -x

echo "Executing $0"

case $1 in

    tap*)    echo "tun network"
     BRIDGE=br0
    if [ -z "$(ifconfig $BRIDGE)" ] ; then
        /usr/sbin/brctl addbr $BRIDGE
        dhclient $BRIDGE
    fi
    /usr/sbin/tunctl -u `whoami` -t $1
    echo "Bringing up $1 for bridged mode..."
    /sbin/ifconfig $1 0.0.0.0 promisc up
    /sbin/ip link set $1 up
    sleep 0.5s
    echo "Adding $1 to br0..."
    /usr/sbin/brctl addif $BRIDGE $1
    ;;

    dmz*)    echo "dmz network"
     BRIDGE=br1
    if [ -z "$(ifconfig $BRIDGE)" ] ; then
        /usr/sbin/brctl addbr $BRIDGE
        dhclient $BRIDGE
    fi
    /usr/sbin/tunctl -u `whoami` -t $1
    echo "Bringing up $1 for bridged mode..."
    /sbin/ifconfig $1 0.0.0.0 promisc up
    /sbin/ip link set $1 up
    sleep 0.5s
    echo "Adding $1 to $BRIDGE..."
    /usr/sbin/brctl addif $BRIDGE $1
    ;;

    *)   echo "Error: no interface specified or interface '$1' invalid"
        exit 1

esac -----------------8<-----------------8<----------------8<--------------

Quoted 5 lines

eth0 works for all the VM, eth1 doesn't.
constrain: no dhcp, all static ip
any suggestion?

AFAIK, -net user does not need an ifname or script argument - there's no host interface for the user mode stack. Try these:

kvm -name PROXY
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh

-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
-net user,vlan=1
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap

kvm -name WEBAPP
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh

-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
-net user,vlan=1
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap

kvm -name DB
-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139

    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh

-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
-net user,vlan=1
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on -drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home -drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

Signature · 1 line

David.

Paolo Pedaletti

author

2008-07-20 23:52 UTC #9 lore raw

Ciao David,
thank you for the answer, but...

Quoted 24 lines

AFAIK, -net user does not need an ifname or script argument - there's no host interface for the user mode stack. Try these:
kvm -name PROXY
(quoted diff) +0 -3
-net nic,vlan=0,macaddr=00:18:BE:EF:17:2A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:2B,model=rtl8139
    -net user,vlan=1
-drive
index=0,media=disk,if=scsi,file=./ubuntu-server.PROXY.root,boot=on
(quoted diff) +0 -2
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.PROXY.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.PROXY.swap
kvm -name WEBAPP
(quoted diff) +0 -3
-net nic,vlan=0,macaddr=00:18:BE:EF:17:1A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:1B,model=rtl8139
    -net user,vlan=1
-drive
index=0,media=disk,if=scsi,file=./ubuntu-server.WEB.root,boot=on
(quoted diff) +0 -2
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.WEB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.WEB.swap
kvm -name DB

Review

Quoted 7 lines

(quoted diff) +0 -5

-net nic,vlan=0,macaddr=00:18:BE:EF:17:0A,model=rtl8139
    -net tap,vlan=0,ifname=tap0,script=./qemu-ifup.sh
-net nic,vlan=1,macaddr=00:18:BE:EF:17:0B,model=rtl8139
    -net user,vlan=1
-drive index=0,media=disk,if=scsi,file=./ubuntu-server.DB.root,boot=on
-drive index=1,media=disk,if=scsi,file=./ubuntu-server.DB.home
-drive index=2,media=disk,if=scsi,file=./ubuntu-server.DB.swap

nothing.
if I ping one ip from the other, I get:
Destination host unreachable
and tcpdump show nothing

(I can ping each other via "external" ip, the "public" ip on eth0)

by the way... if I get the IP via dhcp from eth1 interface (of the 2 VM) I obtain always the same IP even if the macaddress are different (always 10.0.2.15)

Other ideas?

thank you.

Signature · 2 lines

/* Paolo Pedaletti,
 * [email protected] www.pedaletti.it */