Instead of using iptables, you can give a container an network interface
(for a total of two).
On my system I have an ethernet bridge, br0, with the host's main
interface on in. Then, in a container's config -
# primary, public interface 192.168.1.x from my router
lxc.network.type = veth
lxc.
Just figured it out a fix, I think. For containers to address each other by
both external and internal IPs, I set the DNAT rule on the OUTPUT and
PREROUTING chain, instead of just on the PREROUTING as above.
On Thu, Sep 18, 2014 at 11:03 PM, Shidan wrote:
> I think the case of having a 1 to 1 as
I think the case of having a 1 to 1 assignment of external IPs to
containers is an important use case to document somewhere.
On Thu, Sep 18, 2014 at 12:09 PM, Shidan wrote:
> Hello I have multiple external IP addresses and set up iptables so that
> each container is assigned one external IP on t
Hello I have multiple external IP addresses and set up iptables so that
each container is assigned one external IP on the lxcbr0 NATed bridge in a
1 to 1 fashion similar to this example:
root@SERVER:/var/log# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source
Quoting Dongsheng Song (dongsheng.s...@gmail.com):
> On Wed, Sep 17, 2014 at 10:02 PM, Michael H. Warfield
> wrote:
> > I don't know where the CentOS 7 download template came from. I only
> > recently (days ago) submitted the patches for the live CentOS template
> > to support release 7. Those
On Thu, Sep 18, 2014 at 5:30 PM, Marcel Sánchez Toledano
wrote:
> Hi,
>
> I'm need to make some kind of comparison between the resources (CPU,
> RAM,...) used when executing 1 LxC container and the resources used when
> executing 1 SIMCTL (VNUML utility, UML) Virtual Machine.
>
> And then, extend
Hi,
I'm need to make some kind of comparison between the resources (CPU,
RAM,...) used when executing 1 LxC container and the resources used when
executing 1 SIMCTL (VNUML utility, UML) Virtual Machine.
And then, extend this comparison to a largest amount of containers and VMs.
And ideas? Any wa
Thank you ver much for this explanation, I really appreciate it!
*Marcel Sánchez Toledano*
2014-08-30 16:25 GMT+02:00 Michael H. Warfield :
> On Sat, 2014-08-30 at 09:02 +0200, Marcel Sánchez Toledano wrote:
> > Hi again,
> >
>
> > Anyone who knows about this can tell us something? I need some