I have a dedicated hosting with hetzner. Additionally i have bought a 6IP subnet.
My main IP is: 126.96.36.199 My main subnet is: 255.255.255.224
My additional IPs are 188.8.131.52 to 184.108.40.206.
My usage scenario is as follows: Several instances will have public facing IPs (webservers, etc) All instances will have a second nic setup for internal LAN, so I can have mysql server, memcached, etc on private network locked from outside.
Webserver will be online on 220.127.116.11 and will have a second NIC with ip 10.10.10.10
Currently, i have setup the internal lan. All the instances can connect and ping one another via internal IP (10.10.10.X), but my webserver cannot reach the internet.
I cannot use bridged mode, since hetzner does not allow multiple MACs on same external ip, so I have to use routing mode. Here is my /etc/network/interfaces file for the host:
# network interface settings auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 18.104.22.168 netmask 255.255.255.255 pointopoint 22.214.171.124 gateway 126.96.36.199 broadcast 188.8.131.52 post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp #commentedout #up route add -net 184.108.40.206 netmask 255.255.255.224 gw 220.127.116.11 eth0 # default route to access subnet auto vmbr0 iface vmbr0 inet static address 18.104.22.168 netmask 255.255.255.255 bridge_ports none bridge_stp off bridge_fd 0 up ip route add 22.214.171.124/32 dev vmbr0 up ip route add 126.96.36.199/32 dev vmbr0 auto vmbr1 iface vmbr1 inet static address 10.10.10.1 netmask 255.255.255.0 bridge_ports none bridge_stp off bridge_fd 0 post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE auto vmbr2 iface vmbr2 inet static address 188.8.131.52 netmask 255.255.255.248 bridge_ports none bridge_stp off bridge_fd 0
And here is my kvm interfaces file:
auto eth0 iface eth0 inet static address 184.108.40.206 netmask 255.255.255.255 pointopoint 220.127.116.11 gateway 18.104.22.168 dns-nameservers 22.214.171.124 126.96.36.199 auto eth1 address 10.10.10.12 netmask 255.255.255.0 network 10.10.10.0 broadcast 10.10.10.255
Currently, KVM instances can ping oneanother, but nothing else works Host can ping instances, but nothing else And i cannot get internet access on my instances.
What do I need to change in my configuration in order for this to work.
P.S. NIC type is set to virtio in proxmox