I have a dedicated hosting with hetzner. Additionally i have bought a 6IP subnet.
My main IP is: 22.214.171.124 My main subnet is: 255.255.255.224
My additional IPs are 126.96.36.199 to 188.8.131.52.
My usage scenario is as follows: Several instances will have public facing IPs (webservers, etc) All instances will have a second nic setup for internal LAN, so I can have mysql server, memcached, etc on private network locked from outside.
Webserver will be online on 184.108.40.206 and will have a second NIC with ip 10.10.10.10
Currently, i have setup the internal lan. All the instances can connect and ping one another via internal IP (10.10.10.X), but my webserver cannot reach the internet.
I cannot use bridged mode, since hetzner does not allow multiple MACs on same external ip, so I have to use routing mode. Here is my /etc/network/interfaces file for the host:
# network interface settings auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 220.127.116.11 netmask 255.255.255.255 pointopoint 18.104.22.168 gateway 22.214.171.124 broadcast 126.96.36.199 post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp #commentedout #up route add -net 188.8.131.52 netmask 255.255.255.224 gw 184.108.40.206 eth0 # default route to access subnet auto vmbr0 iface vmbr0 inet static address 220.127.116.11 netmask 255.255.255.255 bridge_ports none bridge_stp off bridge_fd 0 up ip route add 18.104.22.168/32 dev vmbr0 up ip route add 22.214.171.124/32 dev vmbr0 auto vmbr1 iface vmbr1 inet static address 10.10.10.1 netmask 255.255.255.0 bridge_ports none bridge_stp off bridge_fd 0 post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE auto vmbr2 iface vmbr2 inet static address 126.96.36.199 netmask 255.255.255.248 bridge_ports none bridge_stp off bridge_fd 0
And here is my kvm interfaces file:
auto eth0 iface eth0 inet static address 188.8.131.52 netmask 255.255.255.255 pointopoint 184.108.40.206 gateway 220.127.116.11 dns-nameservers 18.104.22.168 22.214.171.124 auto eth1 address 10.10.10.12 netmask 255.255.255.0 network 10.10.10.0 broadcast 10.10.10.255
Currently, KVM instances can ping oneanother, but nothing else works Host can ping instances, but nothing else And i cannot get internet access on my instances.
What do I need to change in my configuration in order for this to work.
P.S. NIC type is set to virtio in proxmox