search for: handle_iptable

Hi, > Can you manually do on the xen interfaces what the scripts would? How about > doing it on some other interface configured in a similar way? Toying with the vif-route script, I might have found a workaround for this issue. If I disable the ifconfig and ip route commands from vif-route script, and bring up vif interface by hand later on, everything seems to work. In other works,

.... Signed-off-by: Ian Campbell <ian.campbell at citrix.com> diff -r 54384951de02 -r 1d33f934dd67 tools/hotplug/Linux/vif-common.sh --- a/tools/hotplug/Linux/vif-common.sh Tue Jul 10 00:07:20 2012 +0100 +++ b/tools/hotplug/Linux/vif-common.sh Tue Jul 10 00:14:54 2012 +0100 @@ -175,7 +175,7 @@ handle_iptable() # ip_of() { - ip addr show "$1" | awk "/^.*inet.*$1\$/{print \$2}" | sed -n '1 s,/.*,,p' + ip -4 -o addr show primary dev eth0 | awk '$3 == "inet" {split($4,i,"/"); print i[1]; exit}' }

.... Signed-off-by: Ian Campbell <ian.campbell at citrix.com> diff -r 54384951de02 -r 1d33f934dd67 tools/hotplug/Linux/vif-common.sh --- a/tools/hotplug/Linux/vif-common.sh Tue Jul 10 00:07:20 2012 +0100 +++ b/tools/hotplug/Linux/vif-common.sh Tue Jul 10 00:14:54 2012 +0100 @@ -175,7 +175,7 @@ handle_iptable() # ip_of() { - ip addr show "$1" | awk "/^.*inet.*$1\$/{print \$2}" | sed -n '1 s,/.*,,p' + ip -4 -o addr show primary dev eth0 | awk '$3 == "inet" {split($4,i,"/"); print i[1]; exit}' }

...if_details ip link set $dev up } case "$command" in add|online) setup_virtual_bridge_port $dev add_to_openvswitch $dev ;; offline) ovs-vsctl --timeout=30 -- --if-exists del-port $dev ;; esac if [ "$type_if" = vif ]; then handle_iptable fi log debug "Successful vif-openvswitch $command for $dev." if [ "$type_if" = vif -a "$command" = "online" ]; then success fi -- Is truth not truth for all? -- Natira, "For the World is Hollow and I have Touched the Sky", stardate 5476...

Package: xen-utils-common Version: 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5 Severity: important Tags: patch security -- System Information: Debian Release: 9.4 APT prefers stable APT policy: (990, 'stable'), (500, 'stable-updates') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-6-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),

...tu 9000) & (sleep 30; ifconfig "$vif" mtu 9000) & (sleep 300; ifconfig "$vif" mtu 9000) & fi ;; offline) do_without_error brctl delif "$bridge" "$vif" do_without_error ifconfig "$vif" down ;; esac handle_iptable log debug "Successful vif-bridge $command for $vif, bridge $bridge." if [ "$command" == "online" ] then success fi /etc/xen/xend-config.sxp changed: (xend-relocation-server yes) (network-script my-network-bridges) (vif-script vif-bridge) (dom0-min-mem 512) (enable-d...

...ip link set $dev up +} + +case "$command" in + add|online) + setup_virtual_bridge_port $dev + add_to_openvswitch $dev + ;; + + offline) + ovs-vsctl --timeout=30 -- --if-exists del-port $dev + ;; +esac + +if [ "$type_if" = vif ]; then + handle_iptable +fi + +log debug "Successful vif-openvswitch $command for $dev." +if [ "$type_if" = vif -a "$command" = "online" ]; then + success +fi -- 1.7.2.5

...quot;$dev" "$type_if" add_to_openvswitch $dev ;; remove|offline) do_without_error ovs-vsctl --timeout=30 \ -- --if-exists del-port $dev do_without_error ip link set $dev down ;; esac if [ "$type_if" = vif ]; then handle_iptable fi log debug "Successful vif-openvswitch $command for $dev." if [ "$type_if" = vif -a "$command" = "online" ]; then success fi

(If this is a double post, I apologize, my email client crashed when I first sent it) I need some help to configure a secure network on my Xen server. I have been looking online and it seems a I need a routed network. But I am having a terrible time implementing it. My setup: Xen 3.4.2 CentOS 5.5 Dom0 1 NIC (eth0) All guests will be HVM What I want to do is something similar to a firewall

Hi there, I am starting a new thread to try and solve a problem I am having will slow network throughput to the XEN host (not to a domU). I have confirmed my problem occurs with PVOPS ''xen/master'' kernel as well using http://pasik.reaktio.net/xen/pv_ops-dom0-debug/config-2.6.31.6-pvops-dom0-xen-master-x86_64 as the .config. It also occurs with a forward ported xenified kernel

Hi there, I am starting a new thread to try and solve a problem I am having will slow network throughput to the XEN host (not to a domU). I have confirmed my problem occurs with PVOPS ''xen/master'' kernel as well using http://pasik.reaktio.net/xen/pv_ops-dom0-debug/config-2.6.31.6-pvops-dom0-xen-master-x86_64 as the .config. It also occurs with a forward ported xenified kernel