vnet

  1. m0nkey_

    jails VNET and a Linux jail

    So I've been poking at Linux jails in 13.0. I've managed to get a Ubuntu and Debian jail running, but now I want to take it a step further. Has anyone ever got VNET working inside of a Linux jail? I can only get so far before I start running into issues. Anyway, here's my jail.conf path =...
  2. Thomas.

    Vnet jail with IPFW NAT outbound traffic no longer works after upgrade from 12.2-RELEASE to 13.0-RELEASE

    Hi, I'm new to FreeBSD (only started tinkering about with it last week), and after lots of digging through the documentation, handbook, and many other online resources I managed to have my vnet enabled jail working in conjunction with ipfw in-kernel NAT. Both inbound and outbound traffic was...
  3. K

    Using VLANS to connect VNET jails to WAN?

    I know I've started a few threads here about odd networking experiments that I am running in VNET jails. Still haven't figured anything out about those when using epair(4) interfaces. So I thought I'd try a different strategy using VLAN interfaces instead. And this time, include a (janky)...
  4. RazAquato

    Solved jail can only reach the bridge (not internet)

    ok, so I'm about to give up here.. banging my head against the wall the answer is probably obvious, but for a newbie this is... frustrating I've tried to follow a bunch of tutorials but for the life of me, I can't get my jails to reach the internet need some advice This is on a fresh install of...
  5. D

    Solved Creating Separate Virtual Interface For Jail

    Hello, I have set up an jail with ezjail while following this handbook tutorial. After setting it up, my physical interface that host uses has two IPs, one for jail one for host. For some programs listening on all IPs in host's interface this is not ideal. Can I add a virtual interface with its...
  6. S

    iocage jail can only reach its host but not the LAN

    I'm in the middle of setting up a dedicated server. It's running ESXi and I installed a FreeBSD guest. Using iocage I want to create some jails. I have done this before more than once and usually this is strait-forward... but this time I'm stuck somehow. The jail is created with vnet=on and I...
  7. S

    Solved vnet jail vlan setup, on lagg interface

    Hi all, I'm trying to setup a separate subnet for my jails, and I think I have everything setup correctly, but am unsure. Here is the Switch: trunk 45-48 Trk2 LACP vlan 23 name "Jails" tagged 23,Trk1-Trk2 no ip address exit Trunk 1 is the firewall, Trunk 2 is the server. I know my...
  8. B

    pf in a Jail

    I have a vnet jail for my physical NIC. In order to start the pf service in that jail, I had to add a devfs.rule to unhide /dev/pf. I also have wireguard jails which I intend to do the same, and connect them to my NIC-jail. (everything is vnet). Does anyone know if this is a bad idea? Will...
  9. B

    Series of Jails as Gateways/Tunnels ... Question re IP/netmasks

    I'm creating a series of network gateway/tunnels with vnet and jails (FreeBSD 12.1p8). The topology looks something like this: NICjail: Contains the physical NIC (igb0), bridge0, and epair members for connection to other tunnel jails (VPNs, Tor, I2P). VPN1jail: Connects to NICjail via epair...
  10. M

    Solved Vnet jail cannot connect to services running on host

    Hello I am currently learning how to use FreeBSD to host some basic services in Jails I am trying to configure networking with jails. I noticed that if I try to connect from a jail to a web server installed on the host, the connection is blocked even if the firewall is disabled. It is a setup...
  11. R

    VNET ARP replies are lost

    My setup is as follows: freenas ---- switch ---- station freenas is running FreeBSD 11.2 with iocage jail using VNET/VIMAGE network stack (though same behaviour is observed on warden jails and previous FreeBSD releases) It all started when I noticed that station loses connection to jail...
  12. tommiie

    Solved Jails vnet - FreeBSD Mastery - multiple interfaces

    Starting on p. 165, to create a jail with multiple interfaces, you need to do: create a cloned interface (lo1), specify multiple interfaces for the jail in a comma-separated list, call the jib script with the bridge names, be happy. Step 1: /etc/rc.conf: ifconfig_em0_name="lab"...
  13. tommiie

    Solved Jails vnet - FreeBSD Mastery examples

    Hey all, I follow along in Lucas' new book FreeBSD mastery: Jails. Starting on p. 159, I copied over the /usr/share/examples/jail/jib file and make it executable (something Lucas fails to mention). However, I use a different name for my physical interface: lab instead of jailether...
  14. Nyakov

    Solved jail + vnet + SLAAC + ipfw

    I decided to share my setup for SLAAC on jail vnet. 1. Create bridge and epair interface in /etc/rc.conf #Configure bridge interface for jails vnet #epair0 - jail interface cloned_interfaces="bridge0 epair0" #create bridge and epair ifconfig_bridge0="ether xx:xx:xx:xx:xx:xx addm re0 SYNCDHCP"...
  15. I

    When to use Jails with VNET, and when not?!

    Would someone please give me a brief explanation of when to use jails with VNET and when not to? If VLAN-ing is not my concern, and services I use do not need a separate network stack - let’s say I run anything from DNS server to MailServer, Database, Java Application Server, VCS, CICD...
  16. R

    Solved BRIDGE interfaces MAC address range

    Hello all, i have a challenge with the generated mac address on the bridge interface. I am building a host wich serves as base for a number of jails so i am creating a VNET network config, becasue i had to compile the kernel vor VNET support i thought to be wise and created a OVF of the VM...
  17. B

    Helping to improve vnet/vimage?

    Hi Network Guru's- I've been running 11-Release branch since 11 was well.... released. I think I'm on 11-RELEASE-p2. I compiled my own kernel to enable vimage and use iocage for jails. I am not using pf or doing anything "exotic" with networking (this is behind a separate firewall). So far...
Top