Troubleshooting Virtuozzo Containers networking problems

Refers to:

  • Plesk 12.5 for Linux
  • Plesk 12.0 for Linux

Created:

2016-11-16 13:13:22 UTC

Modified:

2017-01-25 15:29:10 UTC

0

Was this article helpful?


Have more questions?

Submit a request

Troubleshooting Virtuozzo Containers networking problems

Basic Checks

Determine the networking mode the container operates in.

Windows

  1. See the settings of the Hardware Node's adapter the container is bridged to.

    ipconfig /all
  2. See the network and the network mode.

    vzlist -a -o ctid,nettype,network,ip
  3. See the routing table.

    route print

Linux

  1. See the list of container/node interfaces. If there is a vethCTID.x interface, it is bridged.

    vznetcfg if list
  2. See all interfaces.

    ip a l
  3. See the routing table.

    ip r l
  4. See more detailed information about the bridge (brX) interface.

    brctl show

Determine the correctness of the container's network settings

Bridged

  1. The container IP address, netmask, and default gateway should be set up correctly -- the same way as if you were adding a physical host to the same network.

  2. The router in the LAN segment to which we are adding the bridged container should be able to route packages to the container interface -- that is, there must not be a static ARP table configuration on the router.

  3. Check arp -a .

  4. Always remember the container belongs to the same network segment as the physical adapter on the Hardware Node to which it is bridged.

Host-Routed

  1. Make sure the container has the correct p-t-p settings -- the default in the container is via venet0 ; netmask is 255.255.255.255 or /32 .

    ifconfig | grep venet
  2. Make sure there is a static ARP entry on the Hardware Node for the container IP address.

    arp -a | grep IP
  3. Make sure there is a route for the container’s IP (on the node) to route packages via venet0.

    Linux

    route -n

    Windows

    route print
  4. If there is not an ARP entry or a route, check if you can do ARPing from the node’s interface container’s IP address. If you see any IP address conflict, it means the IP already is assigned in the same LAN segment. If you cannot do ARPing, it is likely there is a router misconfiguration or Parallels Virtuozzo Containers (PVC) cannot do ARPsend on the default node’s interface.

    arpsend -c 1 -w 1 -D -e IP eth0

In Addition

In case a VE is reachable via ping but its resources are not accessible, make sure there is no IP conflict:

traceroute or tracert can be used to check if the icmp packages are going to the correct host, arping can be used to check the MAC address of a host that answers to pings - for CTs in Host-Routed mode MAC should be the same as hardware node's:

# arping 192.168.55.82
ARPING 192.168.55.82 from 192.168.55.81 eth0
Unicast reply from 192.168.55.82 [BC:AE:C5:0A:66:86] 0.712ms
Unicast reply from 192.168.55.82 [BC:AE:C5:0A:66:86] 0.756ms

Documents to Refer to

User's Guide

Frequently Used KBs

KB#1601 [Info] Is a VPN client supported inside a VE?

KB#1661 [FIX] Ipconfig shows nothing inside VE

KB#5243 [FIX] VE fails to initialize network during startup

KB#112961 How to create container attached to two different networks

KB#3061 I have more than one network interface (NIC) with IPs from different networks in my server and I want to use IPs of all networks in VEs simultaneously

KB#113053 Bridged network is not accessible from the host-routed and vice versa

KB#1737 [FIX] VE loses network connectivity when switched from host-route to bridged mode networking

KB#1226 How do I get amount of network traffic consumed by a container?

Known Issues

1465974

The container network will lose connectivity randomly.

Check whether the bridged and host-routed networks are assigned for the container. For example:

IP_ADDRESS="66.199.224.215"
NETIF="ifname=venet1,mac=00:18:51:36:60:3C,host_mac=00:18:51:32:FD:D5,network=eth0s,gw=72.9.100.9,ip=66.199.224.215/255.255.255.224,ip6="

In this case, we need to remove one network and assign a new IP address.

# vzctl set CTID --netif_del venet1 --save
Deleting virtual adapters: veth127.1
Saved parameters for Container 127

1415269

IPv6 inside containers works if the node has an IPv6 address assigned, but does not work if the node only has IPv4. Containers in bridged mode only use the node's NIC when containers in the host-routed mode use the node's routing as well. Therefore, if you set the IPv6 address to the container, but do not set the IPv6 address to the node, there will be no routing for IPv6 in the containers by design.

1431641

After rebooting, the server shows the error "Bringing up interface eth1: bnx2 device eth1 does not seem to be present, delaying initialization Absence of 70-persistent-net.rules causes NICs to be randomly assisgned to interfaces:"

This actually is not related to Parallels Virtuozzo Containers. In fact, it is a common problem with udev and NICs that occurs when there are no persistent rules for the NIC-interface assignment.

1430844

Occasionally, the ping test fails between containers.Container 1 has an external connection in the host-routed mode and LAN in bridged:Container 2 has the opposite settings.

Have more questions? Submit a request
Please sign in to leave a comment.