2.6.31.6 pv_ops and routing DomU

2.6.31.6 pv_ops and routing DomU

[Stefan Kuhne]

[-- Attachment #1.1: Type: text/plain, Size: 404 bytes --]

Hello,

i try to use xen-4.0.0-rcx with linux-2.6.31.6 pv_ops Dom0 Kernel.

I've a DomU as DSL Router with pppoe.
My Hardware has only one NIC, so i have to use it for LAN and pppoe to
my DSL Modem.

My Problem is, that only this DomU and the Dom0 has Internet.
All others have DNS but ping doesn't work.

I can't find anythink in any log file.

Anyone an idea?

Regards,
Stefan Kuhne


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 552 bytes --]

[-- Attachment #2: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

Re: 2.6.31.6 pv_ops and routing DomU

[Konrad Rzeszutek Wilk]

On Tue, Mar 09, 2010 at 11:16:15PM +0100, Stefan Kuhne wrote:
> Hello,
> 
> i try to use xen-4.0.0-rcx with linux-2.6.31.6 pv_ops Dom0 Kernel.
> 
> I've a DomU as DSL Router with pppoe.
> My Hardware has only one NIC, so i have to use it for LAN and pppoe to
> my DSL Modem.

Your DomU goes to the Internet. You Dom0 hooks up to the rest of your
LAN. You want Dom0 and DomU to route packets back and forth, right?

> 
> My Problem is, that only this DomU and the Dom0 has Internet.

I presume you have your Dom0 NIC in a bridge which has the vif for the
DomU.

> All others have DNS but ping doesn't work.

Can you ping your DomU from your LAN? That _should_ work.
> 
> I can't find anythink in any log file.

Go to wireshark website and watch the videos on how to use it. Your
problem is network related.
> 
> Anyone an idea?

I think your DomU routing is not set properly. Look online for tutorials
on NAT/Masquarade/firewall. Make sure you have 
echo 1 > /proc/sys/net/ipv4/ip_forward

Set in your DomU.

Re: 2.6.31.6 pv_ops and routing DomU

[Stefan Kuhne]

[-- Attachment #1.1: Type: text/plain, Size: 1562 bytes --]

Am 09.03.2010 23:31, schrieb Konrad Rzeszutek Wilk:
> On Tue, Mar 09, 2010 at 11:16:15PM +0100, Stefan Kuhne wrote:
>> Hello,
>>
>> i try to use xen-4.0.0-rcx with linux-2.6.31.6 pv_ops Dom0 Kernel.
>>
>> I've a DomU as DSL Router with pppoe.
>> My Hardware has only one NIC, so i have to use it for LAN and pppoe to
>> my DSL Modem.
> 
> Your DomU goes to the Internet. You Dom0 hooks up to the rest of your
> LAN. You want Dom0 and DomU to route packets back and forth, right?
> 
Sorry, but my english isn't got enough for this.
My DomU makes NAT and all stuff.

>> My Problem is, that only this DomU and the Dom0 has Internet.
> 
> I presume you have your Dom0 NIC in a bridge which has the vif for the
> DomU.
> 
Yes.

>> All others have DNS but ping doesn't work.
> 
> Can you ping your DomU from your LAN? That _should_ work.

Yes, this works for other DomUs and real PC in my LAN.

>> I can't find anythink in any log file.
> 
> Go to wireshark website and watch the videos on how to use it. Your
> problem is network related.

But on which interface.
I can try it when i can disconnect Internet.

>> Anyone an idea?
> 
> I think your DomU routing is not set properly. Look online for tutorials
> on NAT/Masquarade/firewall. Make sure you have 
> echo 1 > /proc/sys/net/ipv4/ip_forward
> 
When i use xen-4.0.0-rc2 with an old Dom0 kernel all works fine.
When i boot 2.6.31.6 pv_ops i've my problem.

On another System with two NICs (second is passthrough) all Kernel works
fine.

Regards,
Stefan Kuhne


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 552 bytes --]

[-- Attachment #2: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

Re: 2.6.31.6 pv_ops and routing DomU

[Stefan Kuhne]

[-- Attachment #1.1: Type: text/plain, Size: 414 bytes --]

Am 09.03.2010 23:31, schrieb Konrad Rzeszutek Wilk:
> On Tue, Mar 09, 2010 at 11:16:15PM +0100, Stefan Kuhne wrote:

Hello,

>> I can't find anythink in any log file.
> 
> Go to wireshark website and watch the videos on how to use it. Your
> problem is network related.

i've try to compile it static, but you i can't link it.
Does anyone known a static binary without GUI?

Regards,
Stefan Kuhne


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 552 bytes --]

[-- Attachment #2: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

Re: 2.6.31.6 pv_ops and routing DomU

[Konrad Rzeszutek Wilk]

On Wed, Mar 10, 2010 at 12:19:16PM +0100, Stefan Kuhne wrote:
> Am 09.03.2010 23:31, schrieb Konrad Rzeszutek Wilk:
> > On Tue, Mar 09, 2010 at 11:16:15PM +0100, Stefan Kuhne wrote:
> 
> Hello,
> 
> >> I can't find anythink in any log file.
> > 
> > Go to wireshark website and watch the videos on how to use it. Your
> > problem is network related.
> 
> i've try to compile it static, but you i can't link it.
> Does anyone known a static binary without GUI?

Your distro will probably carry it.

> 
> Regards,
> Stefan Kuhne
> 



> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xensource.com
> http://lists.xensource.com/xen-devel

Re: 2.6.31.6 pv_ops and routing DomU

[Stefan Kuhne]

[-- Attachment #1.1: Type: text/plain, Size: 3358 bytes --]

Am 10.03.2010 20:56, schrieb Konrad Rzeszutek Wilk:
> On Wed, Mar 10, 2010 at 12:19:16PM +0100, Stefan Kuhne wrote:
>> Am 09.03.2010 23:31, schrieb Konrad Rzeszutek Wilk:
>>> On Tue, Mar 09, 2010 at 11:16:15PM +0100, Stefan Kuhne wrote:
>>
Hello,

>>
>>>> I can't find anythink in any log file.
>>>
>>> Go to wireshark website and watch the videos on how to use it. Your
>>> problem is network related.
>>
>> i've try to compile it static, but you i can't link it.
>> Does anyone known a static binary without GUI?
> 
> Your distro will probably carry it.
> 
i've made a tcpdump:

Pass:

--DNS--
09:37:26.933657 IP Maxdata.access.denied.55125 >
Guardian.access.denied.53: 55913+[|domain]
09:37:26.933961 IP Guardian.access.denied.53 >
Maxdata.access.denied.55125: 55913 1/0/0 (46)

--Ping 1--
09:37:26.936136 IP Maxdata.access.denied > virtualhost.in-berlin.de:
ICMP echo request, id 6928, seq 1, length 64
09:37:26.936181 PPPoE  [ses 0x4705] IP koln-d932c04f.pool.mediaWays.net
> virtualhost.in-berlin.de: ICMP echo request, id 6928, seq 1, length 64
09:37:26.971358 PPPoE  [ses 0x4705] IP virtualhost.in-berlin.de >
koln-d932c04f.pool.mediaWays.net: ICMP echo reply, id 6928, seq 1, length 64
09:37:26.971387 IP virtualhost.in-berlin.de > Maxdata.access.denied:
ICMP echo reply, id 6928, seq 1, length 64
09:37:26.972174 IP Maxdata.access.denied.37585 >
Guardian.access.denied.53: 63066+[|domain]
09:37:26.972356 IP Guardian.access.denied.53 >
Maxdata.access.denied.37585: 63066[|domain]

--Ping 2--
09:37:27.938095 IP Maxdata.access.denied > virtualhost.in-berlin.de:
ICMP echo request, id 6928, seq 2, length 64
09:37:27.938136 PPPoE  [ses 0x4705] IP koln-d932c04f.pool.mediaWays.net
> virtualhost.in-berlin.de: ICMP echo request, id 6928, seq 2, length 64
09:37:27.972669 PPPoE  [ses 0x4705] IP virtualhost.in-berlin.de >
koln-d932c04f.pool.mediaWays.net: ICMP echo reply, id 6928, seq 2, length 64
09:37:27.972695 IP virtualhost.in-berlin.de > Maxdata.access.denied:
ICMP echo reply, id 6928, seq 2, length 64
09:37:27.973343 IP Maxdata.access.denied.46607 >
Guardian.access.denied.53: 43607+[|domain]
09:37:27.973490 IP Guardian.access.denied.53 >
Maxdata.access.denied.46607: 43607[|domain]


Fail:

--DNS--
09:38:31.101765 IP Overmind.access.denied.35363 >
Guardian.access.denied.53: 50524+[|domain]
09:38:31.102110 IP Guardian.access.denied.53 >
Overmind.access.denied.35363: 50524[|domain]

--Ping 1--
09:38:31.102551 IP Overmind.access.denied > virtualhost.in-berlin.de:
ICMP echo request, id 52815, seq 1, length 64
09:38:31.102590 PPPoE  [ses 0x4705] IP koln-d932c04f.pool.mediaWays.net
> virtualhost.in-berlin.de: ICMP echo request, id 52815, seq 1, length 64

--Ping 2--
09:38:32.110617 IP Overmind.access.denied > virtualhost.in-berlin.de:
ICMP echo request, id 52815, seq 2, length 64
09:38:32.110645 PPPoE  [ses 0x4705] IP koln-d932c04f.pool.mediaWays.net
> virtualhost.in-berlin.de: ICMP echo request, id 52815, seq 2, length 64
09:38:36.098342 ARP, Request who-has Guardian.access.denied tell
Overmind.access.denied, length 46
09:38:36.098360 ARP, Reply Guardian.access.denied is-at
00:16:3e:52:ab:78 (oui Unknown), length 28

Description:
Maxdata: Dom0
Guardian: routing DomU
Overmind: other Dom0 (externel Client on LAN).

Regards,
Stefan Kuhne


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 552 bytes --]

[-- Attachment #2: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel