[Pkg-virtualbox-devel] Bug#775266: virtualbox networking problems in bridge mode

Ritesh Raj Sarraf rrs at debian.org
Tue Jan 13 11:30:20 UTC 2015


Package: virtualbox
Version: 4.3.20-dfsg-1
Severity: important

When using virtualbox VMs in Bridge Network mode, there are serious
problems.


ON the host, I have a custom bridge configured.

4: lxcbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
link/ether fe:f6:f2:03:7e:33 brd ff:ff:ff:ff:ff:ff
inet 172.16.10.1/16 brd 172.16.255.255 scope global lxcbr0
valid_lft forever preferred_lft forever
inet6 fe80::a0ef:b5ff:fe4a:215c/64 scope link 
valid_lft forever preferred_lft forever




# This bridge will is used to NAT LXC containers' traffic
auto lxcbr0
iface lxcbr0 inet static
    bridge_fd 0
    bridge_maxwait 0
    address 172.16.10.1
    netmask 255.255.0.0
    pre-up brctl addbr lxcbr0
    post-down brctl delbr lxcbr0
    post-down echo 0 > /proc/sys/net/ipv4/ip_forward
    post-down echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
    post-up echo 1 > /proc/sys/net/ipv4/ip_forward
    post-up echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
    post-up iptables -A FORWARD -i lxcbr0 -s 172.16.10.1/16 -j ACCEPT
    post-up iptables -A POSTROUTING -t nat -s 172.16.10.1/16 -j MASQUERADE
    # add checksum so that dhclient does not complain.
    # udp packets staying on the same host never have a checksum filled else
    post-up iptables -A POSTROUTING -t mangle -p udp --dport bootpc -s 172.16.10.1/16 -j CHECKSUM --checksum-fill
    pre-down iptables -D FORWARD -i lxcbr0 -s 172.16.10.1/16 -j ACCEPT
    pre-down iptables -D POSTROUTING -t nat -s 172.16.10.1/16 -j MASQUERADE
    # add checksum so that dhclient does not complain.
    # udp packets staying on the same host never have a checksum filled else
    pre-down iptables -D POSTROUTING -t mangle -p udp --dport bootpc -s 172.16.10.1/16 -j CHECKSUM --checksum-fill




The LXC containers, attached to the bridge, work perfect. 

The VBox VMs, attached to the same brdige, ping in the beginning, but
_eventually_ cannot do any network. THe netwrok start to time out. The
VMs to have their link status.


Looking into the Host's dmesg shows:

[  756.958798] nspr-3[6988]: segfault at 8 ip 00007f0cbcbf285c sp 00007f0ca80b7670 error 4 in VBoxXPCOM.so[7f0cbcb9b000+fe000]


My intent is to have a custom bridge interface, which I hand control.
THen, to it I'd like to attach everythign: KVM, VBox, LXC etc, and let
them all talk to each other.



-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages virtualbox depends on:
ii  adduser          3.113+nmu3
ii  dpkg             1.17.23
ii  libc6            2.19-13
ii  libcurl3-gnutls  7.38.0-4
ii  libgcc1          1:4.9.1-19
ii  libgsoap5        2.8.17-1
ii  libpng12-0       1.2.50-2+b2
ii  libpython2.7     2.7.8-11
ii  libsdl1.2debian  1.2.15-10+b1
ii  libssl1.0.0      1.0.1j-1
ii  libstdc++6       4.9.1-19
ii  libvncserver0    0.9.9+dfsg-6.1
ii  libvpx1          1.3.0-3
ii  libx11-6         2:1.6.2-3
ii  libxcursor1      1:1.1.14-1+b1
ii  libxext6         2:1.3.3-1
ii  libxml2          2.9.1+dfsg1-4
ii  libxmu6          2:1.1.2-1
ii  libxt6           1:1.1.4-1+b1
ii  python           2.7.8-2
ii  python2.7        2.7.8-11
ii  zlib1g           1:1.2.8.dfsg-2+b1

Versions of packages virtualbox recommends:
ii  libgl1-mesa-glx [libgl1]  10.3.2-1
ii  libqt4-opengl             4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtcore4                4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtgui4                 4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  virtualbox-dkms           4.3.20-dfsg-1
ii  virtualbox-qt             4.3.20-dfsg-1

Versions of packages virtualbox suggests:
ii  vde2                            2.3.2+r586-1
ii  virtualbox-guest-additions-iso  4.3.20-1

-- no debconf information



More information about the Pkg-virtualbox-devel mailing list