Hi! My setup with two NICs: Dom0 is my working platform. DomU is my firewall system which establishes the PPP connection to my internet provider. One NIC is used for the internal network (Dom0 and DomU have IP addresses in this network), the other NIC is only bridged to DomU and is used for the PPP connection. Both systems are 64bit versions of Debian/Testing with XEN version 3.4.2. Until now my Dom0 kernel was a 2.6.29.5 with xen-patches-2.6.29-6.tar.bz2. This works very well. Now I was trying Jeremy’s GIT tree. I tried the following versions: 2.6.31.5-Dom0-00500-g34013be 2.6.31.6-Dom0-00696-g41a0695 I don’t have any problems using these versions as DomU kernel, but if I try to use them as Dom0 kernel, I don’t have internet connection from the Dom0. I can connect to the DomU, which has a working internet connection. If I try to connect to the internet from Dom0, I see the packages leaving the PPP interface (masqueraded as it should be), but I don’t receive respons packages. Going back to 2.6.29.5 for the Dom0 solves the problem. Any idea what this could be? Thanks for your answers! Shade and sweet water! Stephan -- | Stephan Seitz E-Mail: stse@fsing.rootsland.net | | PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html | _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Pasi Kärkkäinen
2009-Dec-20 19:56 UTC
Re: [Xen-users] Jeremy''s GIT-tree and network problems
On Sun, Dec 20, 2009 at 07:56:57PM +0100, Stephan Seitz wrote:> Hi! > > My setup with two NICs: Dom0 is my working platform. DomU is my firewall > system which establishes the PPP connection to my internet provider. > One NIC is used for the internal network (Dom0 and DomU have IP addresses > in this network), the other NIC is only bridged to DomU and is used for > the PPP connection. > > Both systems are 64bit versions of Debian/Testing with XEN version 3.4.2. > > Until now my Dom0 kernel was a 2.6.29.5 with > xen-patches-2.6.29-6.tar.bz2. This works very well. Now I was trying > Jeremy???s GIT tree. I tried the following versions: > 2.6.31.5-Dom0-00500-g34013be > 2.6.31.6-Dom0-00696-g41a0695 > > I don???t have any problems using these versions as DomU kernel, but if > I try to use them as Dom0 kernel, I don???t have internet connection from > the Dom0. I can connect to the DomU, which has a working internet > connection. If I try to connect to the internet from Dom0, I see the > packages leaving the PPP interface (masqueraded as it should be), but > I don???t receive respons packages. > > Going back to 2.6.29.5 for the Dom0 solves the problem. > > Any idea what this could be? Thanks for your answers! > > Shade and sweet water! >Well what does "dmesg" say in dom0? Does the NIC driver load? Does it give errors? what does "ethtool -i eth0" say? Or "ethtool -i peth0", depending your network setup. -- Pasi _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Stephan Seitz
2009-Dec-21 21:57 UTC
[Xen-users] Re: Jeremy''s GIT-tree and network problems
On Sun, Dec 20, 2009 at 09:56:58PM +0200, Pasi Kärkkäinen wrote:>Well what does "dmesg" say in dom0? Does the NIC driver load? Does it >give errors?dmesg shows no errors, the NIC driver loads fine without errors.>what does "ethtool -i eth0" say? Or "ethtool -i peth0", depending your >network setup.Well, the only difference in the output of „ethtool peth0” between the two kernels is, that „Link partner advertised auto-negotiation:” is set to yes with Jeremy’s kernel. „Link partner advertised link modes” is set to „Not reported” with the older kernel. The newer kernel has the received values. The speed/duplex values are correct. DomU *has* a working internet connection. And Dom0 can reach the internet through proxy servers within DomU. Only the direct internet access from Dom0 is not working. Using tshark I see the packets in DomU going through the ppp0 interface. But I don’t see the packets anymore in Dom0 on the physical interface to the DSL modem. Here I see only the packets generated by DomU itself. Shade and sweet water! Stephan -- | Stephan Seitz E-Mail: stse@fsing.rootsland.net | | PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html | _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Pasi Kärkkäinen
2009-Dec-22 09:00 UTC
Re: [Xen-users] Re: Jeremy''s GIT-tree and network problems
On Mon, Dec 21, 2009 at 10:57:19PM +0100, Stephan Seitz wrote:> On Sun, Dec 20, 2009 at 09:56:58PM +0200, Pasi Kärkkäinen wrote: > >Well what does "dmesg" say in dom0? Does the NIC driver load? Does it > >give errors? > > dmesg shows no errors, the NIC driver loads fine without errors. > > >what does "ethtool -i eth0" say? Or "ethtool -i peth0", depending your > >network setup. > > Well, the only difference in the output of ???ethtool peth0??? between the > two kernels is, that ???Link partner advertised auto-negotiation:??? is set > to yes with Jeremy???s kernel. ???Link partner advertised link modes??? is > set to ???Not reported??? with the older kernel. The newer kernel has the > received values. > > The speed/duplex values are correct. DomU *has* a working internet > connection. And Dom0 can reach the internet through proxy servers within > DomU. Only the direct internet access from Dom0 is not working. Using > tshark I see the packets in DomU going through the ppp0 interface. But > I don???t see the packets anymore in Dom0 on the physical interface to the > DSL modem. Here I see only the packets generated by DomU itself. > > Shade and sweet water! >ppp0? Do you have pppoe or so? Sounds like a dom0 networking configuration issue, not a kernel/xen issue. -- Pasi _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Stephan Seitz
2009-Dec-22 14:06 UTC
[Xen-users] Re: Jeremy''s GIT-tree and network problems
Pasi, first thanks for your help! On Tue, Dec 22, 2009 at 11:00:36AM +0200, Pasi Kärkkäinen wrote:>ppp0? Do you have pppoe or so?Yes, like I wrote in my first mail: My setup with two NICs: Dom0 is my working platform. DomU is my firewall system which establishes the PPP connection to my internet provider. One NIC is used for the internal network (Dom0 and DomU have IP addresses in this network), the other NIC is only bridged to DomU and is used for the PPP connection.>Sounds like a dom0 networking configuration issue, not a kernel/xen issue.I am quite sure this is not the case. Dom0 can connect to DomU, and DomU has Internet connection through PPP. But Dom0 can’t connect to the Internet. Case 1: DomU creates the Internet traffic - I see the packets in DomU tracing on ppp0 - I see the packets in Dom0 tracing on eth1 (the interface to the DSL modem, which is bridged to DomU and is not used in Dom0) Case 2: Dom0 creates the Internet traffic - I see the packets in DomU tracing on ppp0 - I don’t see the packets anymore in Dom0 on eth1 So what networking configuration could be wrong? The bridge interfaces are correct or Dom0 couldn’t contact DomU and DomU couldn’t reach the Internet. Dom0 is correctly using DomU as Internet gateway, or I wouldn’t see the packets on the ppp0 interface in DomU. Masquerading and the other NAT stuff is working correctly. The same configuration is working with the older Dom0 kernel (I don’t have to switch the DomU kernel back to the older version). And since I forgot the output of „ethtool -i”, here it is. It is identical in both kernels: osgiliath:/home/stse# ethtool -i peth0 driver: r8169 version: 2.3LK-NAPI firmware-version: bus-info: 0000:04:00.0 osgiliath:/home/stse# ethtool -i eth1 driver: r8169 version: 2.3LK-NAPI firmware-version: bus-info: 0000:03:00.0 Shade and sweet water! Stephan -- | Stephan Seitz E-Mail: stse@fsing.rootsland.net | | PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html | _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Markus Schuster
2009-Dec-29 23:41 UTC
[Xen-users] Re: Jeremy''s GIT-tree and network problems
Stephan Seitz wrote:> [..] >>Sounds like a dom0 networking configuration issue, not a kernel/xen issue. > > I am quite sure this is not the case. > [..]Hi Stephan, just found your thread. I think I experience similar issues with recent pv_ops dom0 kernels - but I have never tried older versions (like 2.6.29). I don''t want to get into details about the problems I experience now - I wanted to start a thread of it''s own later on - but could you try to lower the MTU of the interfaces that connects dom0 and domU to maybe 1400? Have you tried pinging an external IP address from dom0? Do you see the following message in dom0s dmesg: [2097720.211014] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet I see this message for ICMP traffic (and only for ICMP traffic!) between two domUs in a setup similar to yours. Maybe we suffer from the similar problem? Regards, Markus _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Stephan Seitz
2009-Dec-30 12:57 UTC
[Xen-users] Re: Jeremy''s GIT-tree and network problems
On Wed, Dec 30, 2009 at 12:41:53AM +0100, Markus Schuster wrote:>now - I wanted to start a thread of it''s own later on - but could you >try to lower the MTU of the interfaces that connects dom0 and domU to >maybe 1400?Yes I can try it, but I don’t think this will work.>Have you tried pinging an external IP address from dom0? Do you see the >following message in dom0s dmesg: >[2097720.211014] Attempting to checksum a non-TCP/UDP packet, dropping a >protocol 1 packetYes, I was using ping for the connectivity check (together with other tests). No, I never saw this line.>I see this message for ICMP traffic (and only for ICMP traffic!) between two >domUs in a setup similar to yours. >Maybe we suffer from the similar problem?Doesn’t think so. My problem seems to be, that my network traffic to the Internet is getting lost at the NIC bridge that connects the DSL modem to the DomU if the traffic is generated by Dom0 (with DomU as the gateway) but not it the traffic is generated by DomU. Shade and sweet water! Stephan -- | Stephan Seitz E-Mail: stse@fsing.rootsland.net | | PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html | _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users