[Pkg-virtualbox-devel] Bug#775266: virtualbox networking problems in bridge mode
Ritesh Raj Sarraf
rrs at debian.org
Tue Jan 13 11:30:20 UTC 2015
Package: virtualbox
Version: 4.3.20-dfsg-1
Severity: important
When using virtualbox VMs in Bridge Network mode, there are serious
problems.
ON the host, I have a custom bridge configured.
4: lxcbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether fe:f6:f2:03:7e:33 brd ff:ff:ff:ff:ff:ff
inet 172.16.10.1/16 brd 172.16.255.255 scope global lxcbr0
valid_lft forever preferred_lft forever
inet6 fe80::a0ef:b5ff:fe4a:215c/64 scope link
valid_lft forever preferred_lft forever
# This bridge will is used to NAT LXC containers' traffic
auto lxcbr0
iface lxcbr0 inet static
bridge_fd 0
bridge_maxwait 0
address 172.16.10.1
netmask 255.255.0.0
pre-up brctl addbr lxcbr0
post-down brctl delbr lxcbr0
post-down echo 0 > /proc/sys/net/ipv4/ip_forward
post-down echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
post-up iptables -A FORWARD -i lxcbr0 -s 172.16.10.1/16 -j ACCEPT
post-up iptables -A POSTROUTING -t nat -s 172.16.10.1/16 -j MASQUERADE
# add checksum so that dhclient does not complain.
# udp packets staying on the same host never have a checksum filled else
post-up iptables -A POSTROUTING -t mangle -p udp --dport bootpc -s 172.16.10.1/16 -j CHECKSUM --checksum-fill
pre-down iptables -D FORWARD -i lxcbr0 -s 172.16.10.1/16 -j ACCEPT
pre-down iptables -D POSTROUTING -t nat -s 172.16.10.1/16 -j MASQUERADE
# add checksum so that dhclient does not complain.
# udp packets staying on the same host never have a checksum filled else
pre-down iptables -D POSTROUTING -t mangle -p udp --dport bootpc -s 172.16.10.1/16 -j CHECKSUM --checksum-fill
The LXC containers, attached to the bridge, work perfect.
The VBox VMs, attached to the same brdige, ping in the beginning, but
_eventually_ cannot do any network. THe netwrok start to time out. The
VMs to have their link status.
Looking into the Host's dmesg shows:
[ 756.958798] nspr-3[6988]: segfault at 8 ip 00007f0cbcbf285c sp 00007f0ca80b7670 error 4 in VBoxXPCOM.so[7f0cbcb9b000+fe000]
My intent is to have a custom bridge interface, which I hand control.
THen, to it I'd like to attach everythign: KVM, VBox, LXC etc, and let
them all talk to each other.
-- System Information:
Debian Release: 8.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages virtualbox depends on:
ii adduser 3.113+nmu3
ii dpkg 1.17.23
ii libc6 2.19-13
ii libcurl3-gnutls 7.38.0-4
ii libgcc1 1:4.9.1-19
ii libgsoap5 2.8.17-1
ii libpng12-0 1.2.50-2+b2
ii libpython2.7 2.7.8-11
ii libsdl1.2debian 1.2.15-10+b1
ii libssl1.0.0 1.0.1j-1
ii libstdc++6 4.9.1-19
ii libvncserver0 0.9.9+dfsg-6.1
ii libvpx1 1.3.0-3
ii libx11-6 2:1.6.2-3
ii libxcursor1 1:1.1.14-1+b1
ii libxext6 2:1.3.3-1
ii libxml2 2.9.1+dfsg1-4
ii libxmu6 2:1.1.2-1
ii libxt6 1:1.1.4-1+b1
ii python 2.7.8-2
ii python2.7 2.7.8-11
ii zlib1g 1:1.2.8.dfsg-2+b1
Versions of packages virtualbox recommends:
ii libgl1-mesa-glx [libgl1] 10.3.2-1
ii libqt4-opengl 4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii libqtcore4 4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii libqtgui4 4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii virtualbox-dkms 4.3.20-dfsg-1
ii virtualbox-qt 4.3.20-dfsg-1
Versions of packages virtualbox suggests:
ii vde2 2.3.2+r586-1
ii virtualbox-guest-additions-iso 4.3.20-1
-- no debconf information
More information about the Pkg-virtualbox-devel
mailing list