Re: [vserver] Three network configuration

Roderick A. Anderson wrote:
> Oliver Welter wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hi Rod,
>>
>>> Has anyone configured a Linux-Vserver with three NICs to three
>>> different
>>> networks?
>>>
>>> Two WANs and one LAN. The guests will need to access at least one and
>>> possibly two or three of the networks. All traffic needs to go back
>>> out
>>> the same interface it came in on.
>>>
>> I am successfully running such a setup. The only issue you have to care
>> about is routing of outgoing connections if your default gateway of the
>> host is not reachable from inside the guest.
>> You can use "ip" tools to set source based routing rules, here is an
>> excerpt of mine:
>>
>> $IP route add 82.x.x.0/25 dev vlan3 table 103
>> $IP route add default via 82.x.x.1 dev vlan3 table 103
>> $IP rule add from 82.x.x.0/25 table 103
>>
>> I put this into an init script.
>
> Thanks. I _have_ been down this path but never with a good map or
> directions. :-)
>
> Redhat/Fedora/CentOS all have a ifup-/ifdown-routes scripts. Problem is
> they are poorly documented. Looking at the one on my CentOS 5 system
> there are labels; ADDRESS, GATEWAY, NETMASK; and code blocks for route,
> rule, etc. but no documentation.

It's really very simple, you just create a
/etc/sysconfig/network-scripts/rule-ethX file containing your rules, e.g.
from 1.2.3.4 lookup 4
and then /etc/sysconfig/network-scripts/route-ethX containing something like
1.2.3.4/24 dev ethX table 4
default via 1.2.3.1 dev ethX table 4

> This all looks familiar (he types with eyes downcast) from a list thread
> in September 2006.
>
> I'm going hunting for the Redhat (CentOS) pages on this and try again.
>
> Thanks for the hint.
>
>
> Rod
> --
>>
>> Oliver
>>
>> - --
>> Protect your environment - close windows and adopt a penguin!
>> PGP-Key: 3B2C 8095 A7DF 8BB5 2CFF 8168 CAB7 B0DD 3985 1721
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2.0.7 (GNU/Linux)
>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>>
>> iD8DBQFHe7y4yrew3TmFFyERAmFpAJ4mKxf69copX417CQoSw29s3chaMACffHzV
>> Z7YZ8j/uX5Z6DbFloWgnvc0=
>> =WgyN
>> -----END PGP SIGNATURE-----
>

-- 
Daniel Hokka Zakrisson