6,534
edits
Changes
use template:legacy
{{Legacy}}
This article describes how to assign public IPs to containers running on OVZ Hardware Nodes in case you have a following network topology:
[[Image:PrivateIPs_fig1.gif|An initial network topology]]
== Using a spare IP in the same range ==
If you have a spare IP to use, you could assign this as a subinterface and use this as nameserver:
<pre>[HN] ifconfig eth0:1 *.*.*.*
[HN] vzctl set 101 --nameserver *.*.*.*</pre>
== Prerequisites ==
=== Hardware Node configuration ===
{{Warning|if you are '''configuring''' the node '''remotely''' you '''must''' prepare a '''script''' with the below commands and run it in background with the redirected output or you'll '''lose the access''' to the Node.}}
==== Create a bridge device ====
[HN]# ip route add default via 10.0.0.1 dev br0
==== A script example ====
==== Edit the container's configuration ====
Add these parameters to the <code>/etc/vz/conf/$CTID.conf</code> file which will be used during the network configuration:
* Add <code>VE_DEFAULT_GATEWAY="CT DEFAULT GATEWAY"</code>
* Add <code>BRIDGEDEV="BRIDGE NAME"</code> (a bridge name to which the container veth interface should be added)
An example:
<pre>
# Network customization section
VETH_IP_ADDRESS="85.86.87.195/26"
VE_DEFAULT_GATEWAY="85.86.87.193"
for str in $NETIF_OPTIONS; do \
# getting 'ifname' parameter value
if [[ echo "$str" =~ | grep -o "^ifname=" ]]; then
# remove the parameter name from the string (along with '=')
CTIFNAME=${str#*=};
fi
# getting 'host_ifname' parameter value
if [[ echo "$str" =~ | grep -o "^host_ifname=" ]]; then
# remove the parameter name from the string (along with '=')
VZHOSTIF=${str#*=};
exit 0
</pre>
<p><small>Note: this script can be easily extended to work for multiple triples <bridge, ip address, veth device>, see http://viresosysadmin-ivanov.blogspot.com/2008/02/2-veth-with-2-brindgesbridges-on-openvz-at.html </small></p>
==== Make the script to be run on a container start ====
==== Create On-umount script for remove HW → CT route(s) ====
which should be called each time a container with VEID (<code></etc/sysconfigvz/vzconf/$VEID.umount</<code>), or any container (<code></etc/sysconfigvz/vzconf/vps.umount</<code>) is stoped:stopped.
<pre>
#!/bin/bash
# /etc/sysconfigvz/vzconf/$VEID.umount or /etc/sysconfigvz/vzconf/vps.umount
# a script to remove routes to container with veth-bridge from bridge
</pre>
{{Note|The script should be executable (chmod +x /etc/sysconfigvz/vzconf/vps.umount)}}
==== Setting the route CT → HN ====