I don't understand the modes of lxc network.
I'd like to have 4 guests: apache1, apache2, database and frontdoor
frontdoor is a squid which decides which apache should be used
It works perfectly on vservers, when all of guests has a dummy interface (isolated from web) and frontdoor has two interfaces real eth0 and dummy
Now I migrate to lxc, and instead of dummy I use bridge (on host) and mode=veth (on guests)
I'm not happy seeing four vethLIJG3f in ifconfig, but let's see its ok.
the problem is, that I CAN'T get to squid. I'm trying to iptables -t NAT -A PREROUTING -p tcp --dport 80 -j DNAT --to-dest 172.16.0.2 but it simply doesn't work.
I wonder if I should change veth to something else?