I have a dedicated hosting with hetzner. Additionally i have bought a 6IP subnet.
My main IP is: 184.108.40.206 My main subnet is: 255.255.255.224
My additional IPs are 220.127.116.11 to 18.104.22.168.
My usage scenario is as follows: Several instances will have public facing IPs (webservers, etc) All instances will have a second nic setup for internal LAN, so I can have mysql server, memcached, etc on private network locked from outside.
Webserver will be online on 22.214.171.124 and will have a second NIC with ip 10.10.10.10
Currently, i have setup the internal lan. All the instances can connect and ping one another via internal IP (10.10.10.X), but my webserver cannot reach the internet.
I cannot use bridged mode, since hetzner does not allow multiple MACs on same external ip, so I have to use routing mode. Here is my /etc/network/interfaces file for the host:
# network interface settings auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 126.96.36.199 netmask 255.255.255.255 pointopoint 188.8.131.52 gateway 184.108.40.206 broadcast 220.127.116.11 post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp #commentedout #up route add -net 18.104.22.168 netmask 255.255.255.224 gw 22.214.171.124 eth0 # default route to access subnet auto vmbr0 iface vmbr0 inet static address 126.96.36.199 netmask 255.255.255.255 bridge_ports none bridge_stp off bridge_fd 0 up ip route add 188.8.131.52/32 dev vmbr0 up ip route add 184.108.40.206/32 dev vmbr0 auto vmbr1 iface vmbr1 inet static address 10.10.10.1 netmask 255.255.255.0 bridge_ports none bridge_stp off bridge_fd 0 post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o eth0 -j MASQUERADE auto vmbr2 iface vmbr2 inet static address 220.127.116.11 netmask 255.255.255.248 bridge_ports none bridge_stp off bridge_fd 0
And here is my kvm interfaces file:
auto eth0 iface eth0 inet static address 18.104.22.168 netmask 255.255.255.255 pointopoint 22.214.171.124 gateway 126.96.36.199 dns-nameservers 188.8.131.52 184.108.40.206 auto eth1 address 10.10.10.12 netmask 255.255.255.0 network 10.10.10.0 broadcast 10.10.10.255
Currently, KVM instances can ping oneanother, but nothing else works Host can ping instances, but nothing else And i cannot get internet access on my instances.
What do I need to change in my configuration in order for this to work.
P.S. NIC type is set to virtio in proxmox