<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi,<div class=""><br class=""></div><div class="">I’m running on Ubuntu18.04 LXC 3.0.0.</div><div class=""><br class=""></div><div class="">I’ve created 5 debian9 containers with default eth0 networking on NAT:</div><div class=""><br class=""></div><div class=""><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"># lxc network show lxdbr0</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;">config:</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"> ipv4.address: 10.1.1.1/24</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"> ipv4.dhcp.ranges: 10.1.1.2-10.1.1.99</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"> ipv4.nat: "true"</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"> ipv6.address: fd42:6f79:c120:7701::1/64</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"> ipv6.nat: "true"</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;">description: Natted network 0</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;">name: lxdbr0</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;">type: bridge</span></div></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-family: Helvetica; font-size: 12px;">One of the containers (frontal) has an additional interface configured with:</span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"># lxc network attach vlan7 frontal</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"># lxc config show kspreprodfrontal</span></div></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">…</div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;">devices:</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> vlan7:</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> nictype: macvlan</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> parent: vlan7</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> type: nic</span></div></span></div></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><span class="" style="font-family: Helvetica; font-size: 12px;"><br class=""></span></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><span class="">vlan7 is a </span>flan with id: 7 configured in <span class="" style="font-family: Monaco; font-size: 10px;">/etc/netplan/01-netcfg.yaml</span><span class="" style="font-family: Monaco; font-size: 10px;"> </span></div><div class="" style="margin: 0px; font-size: 10px; line-height: normal; font-family: Monaco; background-color: rgb(255, 255, 255);"><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;">... </span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;">vlans:</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> vlan7:</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> id: 7</span></div><div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"> link: enp1s0f0</span></div><div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">I’ve changed the frontal host internal networking so that eth1 comes first and default route is going through eth1. </div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">Everything works internal and external…except from time to time, the frontal starts refusing connexions from the outside for a few seconds (up to 50).</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">It looks like general networking because all ports suddenly stop working (connexion refused) </div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">internally the frontal remains reachable</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">I’m running haproxy on ports 80 and 443, but also tried running apache2 on port 8082. All ports go down at the same time.</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><div class="">I’ve now installed an Ubuntu (16.04) container and added the vlan7 network the same way.</div><div class="">It worked fine…for about an hour and stopped working again, but for good.</div><div class="">What is weird is that port 80 and 443 are refused but port 22 is working (maybe that’s the host ssh?).</div><div class=""><br class=""></div></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">Any idea?</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">Thanks for any suggestion.</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">Cheers,</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">Michel</div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);">PS: Sorry for my previous post where I replied to another message and apparently messing with another thread... </div></div></div><div class=""><div class=""><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class="" style="margin: 0px; line-height: normal; background-color: rgb(255, 255, 255);"><br class=""></div></div></div></div></body></html>