Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a CentOS-based host and a KVM Debian-based virtual machine on it. A host has an Ethernet bridge on its external network interface, this bridge is used by KVM:

br0       Link encap:Ethernet  HWaddr 00:25:90:01:5E:92  
          inet addr:5.XX.XX.84  Bcast:5.XX.XX.255  Mask:
          inet6 addr: fe80::fc54:ff:feaf:95b3/64 Scope:Link
          RX packets:2893439068 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2943859744 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:3109906781642 (2.8 TiB)  TX bytes:3271403241664 (2.9 TiB)

br0:0     Link encap:Ethernet  HWaddr 00:25:90:01:5E:92  
          inet addr:  Bcast:  Mask:

The bridge has two IPs, one external and another one from a virtual LAN between the host and the guest. It acts as a default gateway for the guest. STP is turned off on the bridge.

The problem is that the guest got an odd routing rule somehow:

root@new:~# ip route get via 5.XX.XX.81 dev eth0  src 
    cache  ipid 0x0dfb rtt 4.781s rttvar 4.297s ssthresh 7 cwnd 9

5.XX.XX.81 is a default gateway of the host and I can't find this IP anywhere in static routing tables on the guest:

root@new:~# ip route list
default via dev eth0 via dev tun0 dev tun0  proto kernel  scope link  src dev eth0  proto kernel  scope link  src 

I wonder how this was possible at all and what should we do to prevent situations like this? Of course, ip route flush cache saved us but we definitely want to eliminate problem itself not to blindly flush the routing cache periodically.

share|improve this question
ICMP redirects, linux-ip.net/html/routing-icmp.html Your solution is quite unusual, normally one wouldn't bridge to a real interface but setup routing and masquerading on the host. –  AndreasM Oct 22 '13 at 12:30
@AndreasM Please convert your comment to the answer and I will accept it as a solution, you were absolutely right! –  Alex Oct 16 at 5:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.