Kernel KVM virtualization development
 help / color / mirror / Atom feed
From: Stefan Hajnoczi <stefanha@gmail.com>
To: folkert <folkert@vanheusden.com>
Cc: kvm@vger.kernel.org
Subject: Re: FAQ on linux-kvm.org has broken link
Date: Wed, 31 Jul 2013 10:46:24 +0200	[thread overview]
Message-ID: <20130731084624.GA20915@stefanha-thinkpad.muc.redhat.com> (raw)
In-Reply-To: <20130730204514.GA9179@belle.intranet.vanheusden.com>

On Tue, Jul 30, 2013 at 10:45:20PM +0200, folkert wrote:
> > If you keep losing network connectivity you may have a MAC or IP address
> > conflict.  The symptom is that network traffic is intermittent - for
> > example, ping might work but a full TCP connection does not.
> 
> I submitted a bug at bugzilla a while ago which I updated today with new
> findings: https://bugzilla.kernel.org/show_bug.cgi?id=60620
> This week the system ran a couple of times for 1-2 days but tonight was
> a bit of a disaster: I had to reboot the system 18 times. Sometimes it
> was fine for half an hour but most of the times after a couple of
> minutes (sometimes even during boot) the networking on that one guest
> failed.

I can't add anything besides suggesting slightly more verbose
troubleshooting steps:

1. Wait until the guest suffers from lost network connectivity.

2. Confirm the MAC/IP addresses and run tcpdump -ni $IFACE inside the
   guest.  Ping the guest from the host and check whether tcpdump
   reports ICMP ping packets.

3. Now try pinging the host from the guest and run tcpdump -ni $IFACE on
   the host.  To determine the host-side tap interface, run the
   following:

   $ virsh domiflist mauer
   Interface  Type       Source     Model       MAC
   -------------------------------------------------------
   vnet0      network    default    virtio      52:54:00:b9:c8:4d

Now you have verified tap connectivity with the guest.  We now know:

1. Tap connectivity is fine (both transmit and receive are working)
2. Either transmit or receive are broken (ping doesn't work but tcpdump
   does show incoming packets on one side).
3. Tap connectivity is broken (ping fails and tcpdump shows no ICMP
   packets).

If the result is #1 then you can continue troubleshooting the next step:
the bridge or NAT configuration on the host.

If the result is #2, check firewalls on host and guest.  Also try the
following inside the guest: disable the network interface, rmmod
virtio_net, modprobe virtio_net again, and bring the network up.

If the result is #3, check firewalls on host and guest as well as dmesg
output in host and guest.

Stefan

  reply	other threads:[~2013-07-31  8:46 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-07-30  1:18 FAQ on linux-kvm.org has broken link folkert
2013-07-30 12:25 ` Stefan Hajnoczi
2013-07-30 12:45   ` folkert
2013-07-30 20:45   ` folkert
2013-07-31  8:46     ` Stefan Hajnoczi [this message]
2013-08-02 11:37       ` folkert
2013-08-02 15:25         ` Stefan Hajnoczi
2013-08-02 18:06           ` folkert
2013-08-05 11:31             ` Stefan Hajnoczi
2013-08-05 20:59               ` folkert
2013-08-06  8:13                 ` Stefan Hajnoczi
2013-09-03 17:03                   ` folkert
2013-08-26 19:50               ` folkert
2013-08-27  7:31                 ` Stefan Hajnoczi
2013-10-29 17:18                   ` folkert
2013-11-01  9:52                     ` Stefan Hajnoczi

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20130731084624.GA20915@stefanha-thinkpad.muc.redhat.com \
    --to=stefanha@gmail.com \
    --cc=folkert@vanheusden.com \
    --cc=kvm@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox