Anders Andersson
2008-Jul-06 14:23 UTC
[Xen-users] Two bridges on one host, can not communicate on the second, what did I miss?
Hello! I''m trying to set up an "internal" bridge on a Xen host (xen 3.2, ubuntu server 8.04 as a host). I am trying to get domU A communicate with domU B, with no success. First I followed the instructions in the XenNetworking page on the wiki to get another bridge with no physical interface connected. I created a file called /etc/xen/scripts/network-custom: #!/bin/sh dir=$(dirname "$0") "$dir/network-bridge" "$@" vifnum=0 "$dir/network-bridge" "$@" vifnum=1 bridge=dmz netdev=dummy0 After a reboot, this bridge comes up fine, and the output from "brctl show" looks like the default bridge that the network-bridge script creates. I have now a pdummy0 interface configured as well, belonging to the bridge, but that is of course expected. After this I create two guests: domU_A and domU_B. They are both on the same network, 10.19.0.0/24, with IP number 10.19.0.2 and 10.19.0.3 respectively. They just have one virtual network interface each, and I added "bridge=dmz" to them, so they will connect to the dmz bridge. After I start up both guests, I can see from "brctl show" that their vif1.0 and vif2.0 have been attached to the dmz bridge, and inside, the network interface has been configured correctly if I look at them using ifconfig. Here is where I fail. They can not access each other through the network, not with ping, nor with anything else. Using netcat gives me some slightly helpful message: domU_B:~# echo hello | nc 10.19.0.2 9999 (UNKNOWN) [10.19.0.2] 9999 (?) : No route to host The output from "route" shows (sorry if the columns are not aligned correctly): Destination Gateway Genmask Flags Metric Ref Use Iface 10.19.0.0 * 255.255.255.0 U 0 0 0 eth0 I don''t have a default gateway, but well, there *is* no gateway, there are just two clients. The "ethtool -K eth0 tx off" trick doesn''t make any difference. What''s sad here is that networking within the default xen bridge works great, with exactly the same method of creating and I have never had any problems with that. As a matter of fact, keeping the exact same config, but changing the bridge to the default bridge, makes it possible to communicate between the guests. But now I would like to add another bridge, as I would like to learn a little more about networking. Help! What did I miss? How can I find out where the problem is? / Anders _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Massimo Mongardini
2008-Jul-07 13:21 UTC
Re: [Xen-users] Two bridges on one host, can not communicate on the second, what did I miss?
Anders, I have a similar working setup on xen 3.1 (dummy interface with 3 bridges and 3 nics on a domU and 2 nics on other 3 domUs) some thoughts: - any filtering on the domUs or dom0 (iptables, ebtables) - do you see mac addresses filling the bridges tables (brctl showmacs <bridgename>)? - check /var/log/xen/ - maybe post "ip address list" "brctl show" from dom0 and "ip address list" from domU together with the comment''s stripped xend-config and domU config. cheers, Massimo Anders Andersson wrote:> Hello! I''m trying to set up an "internal" bridge on a Xen host (xen > 3.2, ubuntu server 8.04 as a host). I am trying to get domU A > communicate with domU B, with no success. > > First I followed the instructions in the XenNetworking page on the > wiki to get another bridge with no physical interface connected. I > created a file called /etc/xen/scripts/network-custom: > > #!/bin/sh > dir=$(dirname "$0") > "$dir/network-bridge" "$@" vifnum=0 > "$dir/network-bridge" "$@" vifnum=1 bridge=dmz netdev=dummy0 > > After a reboot, this bridge comes up fine, and the output from "brctl > show" looks like the default bridge that the network-bridge script > creates. I have now a pdummy0 interface configured as well, belonging > to the bridge, but that is of course expected. > > After this I create two guests: domU_A and domU_B. They are both on > the same network, 10.19.0.0/24, with IP number 10.19.0.2 and 10.19.0.3 > respectively. They just have one virtual network interface each, and I > added "bridge=dmz" to them, so they will connect to the dmz bridge. > > After I start up both guests, I can see from "brctl show" that their > vif1.0 and vif2.0 have been attached to the dmz bridge, and inside, > the network interface has been configured correctly if I look at them > using ifconfig. > > Here is where I fail. They can not access each other through the > network, not with ping, nor with anything else. > > Using netcat gives me some slightly helpful message: > domU_B:~# echo hello | nc 10.19.0.2 9999 > (UNKNOWN) [10.19.0.2] 9999 (?) : No route to host > > > The output from "route" shows (sorry if the columns are not aligned correctly): > Destination Gateway Genmask Flags Metric Ref Use Iface > 10.19.0.0 * 255.255.255.0 U 0 0 0 eth0 > > I don''t have a default gateway, but well, there *is* no gateway, there > are just two clients. > > The "ethtool -K eth0 tx off" trick doesn''t make any difference. > > What''s sad here is that networking within the default xen bridge works > great, with exactly the same method of creating and I have never had > any problems with that. As a matter of fact, keeping the exact same > config, but changing the bridge to the default bridge, makes it > possible to communicate between the guests. But now I would like to > add another bridge, as I would like to learn a little more about > networking. > > Help! What did I miss? How can I find out where the problem is? > > / Anders > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users >-- Massimo Mongardini ~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~ echo ''Jg!J!hjwf!zpv!bo!bqqmf!boe!zpv!hjwf!nf!bo!bqqmf-!uifo!xf!xjmm!ibwf!bo!bqqmf!fbdi/!Cvu!jg!J!hjwf!zpv!bo!jefb!boe!zpv!hjwf!nf!bo!jefb-!xf!xjmm!ibwf!uxp!jefbt!fbdi!'' | perl -pe ''s/(.)/chr(ord($1)-1)/ge'' ~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~ http://massimo.mongardini.it http://www.getthefacts.it http://www.mongardini.it/pizza-howto ~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~-.-~ Please avoid sending me Word or PowerPoint attachments. See http://www.gnu.org/philosophy/no-word-attachments.html _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users