Package: vzctl
Version: 3.0.23-8

There seems to be confusion about the setting of the sysctl proxy_arp key.

On one hand, http://wiki.openvz.org/Quick_installation has 
net.ipv4.conf.default.proxy_arp = 0

But when starting a VE with vzctl, I get the error message

vps-net_add WARNING: Function proxy_arp for eth0 is set to 0. See 
/usr/share/doc/vzctl/README.Debian

Indeed, README.Debian is also ambiguous on this point. Both variants are used.

"If you want network access for the virtual server then you need to
enable IP forwarding. 
...
proxy_arp=0

...


If you want the virtual server to directly access the network you need to
enable proxy_arp...
proxy_arp=1


Does perhaps "directly access" refer to veth rather than venet devices? In that 
case this whole think might make sense.

However, after setting up a second server on the same network I get "address in 
use" errors:

Starting container ...
Container is mounted
Adding IP address(es): 10.158.117.145
arpsend: 10.158.117.145 is detected on another computer : 00:18:fe:fb:32:02

The .145 is not configured on the other host, but rather the proxy_arp setting 
causes it to reply to the arp query. 

This will cause problems unless there is only one server on the subnet.

But maybe the bug is elsewhere. Why would openvz proxy requests for addresses 
that are not configured? Maybe the semantic of "proxy_arp" has changed between 
kernel versions?

Regards,
 Stefan




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to