I have a dedicated hosting with hetzner. Additionally i have bought a 6IP subnet.
My main IP is: 188.8.131.52 My main subnet is: 255.255.255.224
My additional IPs are 184.108.40.206 to 220.127.116.11.
My usage scenario is as follows: Several instances will have public facing IPs (webservers, etc) All instances will have a second nic setup for internal LAN, so I can have mysql server, memcached, etc on private network locked from outside.
Webserver will be online on 18.104.22.168 and will have a second NIC with ip 10.10.10.10
Currently, i have setup the internal lan. All the instances can connect and ping one another via internal IP (10.10.10.X), but my webserver cannot reach the internet.
I cannot use bridged mode, since hetzner does not allow multiple MACs on same external ip, so I have to use routing mode. Here is my /etc/network/interfaces file for the host:
# network interface settings auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 22.214.171.124 netmask 255.255.255.255 pointopoint 126.96.36.199 gateway 188.8.131.52 broadcast 184.108.40.206 post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp #commentedout #up route add -net 220.127.116.11 netmask 255.255.255.224 gw 18.104.22.168 eth0 # default route to access subnet auto vmbr0 iface vmbr0 inet static address 22.214.171.124 netmask 255.255.255.255 bridge_ports none bridge_stp off bridge_fd 0 up ip route add 126.96.36.199/32 dev vmbr0 up ip route add 188.8.131.52/32 dev vmbr0 auto vmbr1 iface vmbr1 inet static address 10.10.10.1 netmask 255.255.255.0 bridge_ports none bridge_stp off bridge_fd 0 post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE auto vmbr2 iface vmbr2 inet static address 184.108.40.206 netmask 255.255.255.248 bridge_ports none bridge_stp off bridge_fd 0
And here is my kvm interfaces file:
auto eth0 iface eth0 inet static address 220.127.116.11 netmask 255.255.255.255 pointopoint 18.104.22.168 gateway 22.214.171.124 dns-nameservers 126.96.36.199 188.8.131.52 auto eth1 address 10.10.10.12 netmask 255.255.255.0 network 10.10.10.0 broadcast 10.10.10.255
Currently, KVM instances can ping oneanother, but nothing else works Host can ping instances, but nothing else And i cannot get internet access on my instances.
What do I need to change in my configuration in order for this to work.
P.S. NIC type is set to virtio in proxmox