Promiscuous mode in KVMAre there good practices for distributing/deploying linux KVM images?Single Computer Openstack Deployment - Essex vs FolsomConfiguring trunk interface in Cisco 3750 switch to allow multiple Vlans connected with Ubuntu servers having a single NIC (sub-interfaced)Bridging Adapter in Ubuntu 12.04 LTS for KVMPromiscous mode on vmware workstationLibvirt/KVM vm - No network connectivitySnort in KVM machinesCreating a virtual network for KVM guests spanning multiple host machinesUbuntu Server IP address not listed in ifconfigUbuntu 16 KVM create bridge for multiple guests
What does the "ep" capability mean?
How can Republicans who favour free markets, consistently express anger when they don't like the outcome of that choice?
what is the sudo password for a --disabled-password user
What does KSP mean?
How could Tony Stark make this in Endgame?
Is there any limitation with Arduino Nano serial communication distance?
Was there a Viking Exchange as well as a Columbian one?
The Defining Moment
Exchange,swap or switch
In order to check if a field is required or not, is the result of isNillable method sufficient?
Mac Pro install disk keep ejecting itself please help
Why other Westeros houses don't use wildfire?
Why does nature favour the Laplacian?
Phrase for the opposite of "foolproof"
How do I deal with a coworker that keeps asking to make small superficial changes to a report, and it is seriously triggering my anxiety?
Document starts having heaps of errors in the middle, but the code doesn't have any problems in it
How can I practically buy stocks?
Packing rectangles: Does rotation ever help?
Does Gita support doctrine of eternal cycle of birth and death for evil people?
What happened to Captain America in Endgame?
Is there really no use for MD5 anymore?
What does it mean to express a gate in Dirac notation?
Rivers without rain
Is there a way to get a compiler for the original B programming language?
Promiscuous mode in KVM
Are there good practices for distributing/deploying linux KVM images?Single Computer Openstack Deployment - Essex vs FolsomConfiguring trunk interface in Cisco 3750 switch to allow multiple Vlans connected with Ubuntu servers having a single NIC (sub-interfaced)Bridging Adapter in Ubuntu 12.04 LTS for KVMPromiscous mode on vmware workstationLibvirt/KVM vm - No network connectivitySnort in KVM machinesCreating a virtual network for KVM guests spanning multiple host machinesUbuntu Server IP address not listed in ifconfigUbuntu 16 KVM create bridge for multiple guests
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have cloud system based on Openstack Icehouse-version. Now I want to test newer version of Openstack (Juno) inside my existing cloud. All hosts and guests use Ubuntu 14.04 as their OS. KVM is hypervisor I am using.
So I created virtual machines on my cloud and installed components of Openstack Juno on them. But I have problems with network connectivity on these virtual machines.
Openstack installation guide says:
If you are building your OpenStack nodes as virtual machines, you must configure the hypervisor to permit promiscuous mode on the external network.
But it does not tell how this is done. Neither was I able to find this information by Googling. I have tried many things such as enabling promiscuous mode on various interfaces with command: ifconfig eth0 promisc but nothing has worked. So how can I enable promiscuous mode on my hypervisor?
EDIT: When using ifconfig I see that my interfaces are in state UP BROADCAST RUNNING PROMISC. Also I have used similar installation before installed on physical hosts and it had no problems.
linux ubuntu virtualization kvm-virtualization openstack
add a comment |
I have cloud system based on Openstack Icehouse-version. Now I want to test newer version of Openstack (Juno) inside my existing cloud. All hosts and guests use Ubuntu 14.04 as their OS. KVM is hypervisor I am using.
So I created virtual machines on my cloud and installed components of Openstack Juno on them. But I have problems with network connectivity on these virtual machines.
Openstack installation guide says:
If you are building your OpenStack nodes as virtual machines, you must configure the hypervisor to permit promiscuous mode on the external network.
But it does not tell how this is done. Neither was I able to find this information by Googling. I have tried many things such as enabling promiscuous mode on various interfaces with command: ifconfig eth0 promisc but nothing has worked. So how can I enable promiscuous mode on my hypervisor?
EDIT: When using ifconfig I see that my interfaces are in state UP BROADCAST RUNNING PROMISC. Also I have used similar installation before installed on physical hosts and it had no problems.
linux ubuntu virtualization kvm-virtualization openstack
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14
add a comment |
I have cloud system based on Openstack Icehouse-version. Now I want to test newer version of Openstack (Juno) inside my existing cloud. All hosts and guests use Ubuntu 14.04 as their OS. KVM is hypervisor I am using.
So I created virtual machines on my cloud and installed components of Openstack Juno on them. But I have problems with network connectivity on these virtual machines.
Openstack installation guide says:
If you are building your OpenStack nodes as virtual machines, you must configure the hypervisor to permit promiscuous mode on the external network.
But it does not tell how this is done. Neither was I able to find this information by Googling. I have tried many things such as enabling promiscuous mode on various interfaces with command: ifconfig eth0 promisc but nothing has worked. So how can I enable promiscuous mode on my hypervisor?
EDIT: When using ifconfig I see that my interfaces are in state UP BROADCAST RUNNING PROMISC. Also I have used similar installation before installed on physical hosts and it had no problems.
linux ubuntu virtualization kvm-virtualization openstack
I have cloud system based on Openstack Icehouse-version. Now I want to test newer version of Openstack (Juno) inside my existing cloud. All hosts and guests use Ubuntu 14.04 as their OS. KVM is hypervisor I am using.
So I created virtual machines on my cloud and installed components of Openstack Juno on them. But I have problems with network connectivity on these virtual machines.
Openstack installation guide says:
If you are building your OpenStack nodes as virtual machines, you must configure the hypervisor to permit promiscuous mode on the external network.
But it does not tell how this is done. Neither was I able to find this information by Googling. I have tried many things such as enabling promiscuous mode on various interfaces with command: ifconfig eth0 promisc but nothing has worked. So how can I enable promiscuous mode on my hypervisor?
EDIT: When using ifconfig I see that my interfaces are in state UP BROADCAST RUNNING PROMISC. Also I have used similar installation before installed on physical hosts and it had no problems.
linux ubuntu virtualization kvm-virtualization openstack
linux ubuntu virtualization kvm-virtualization openstack
edited Jan 20 '15 at 8:16
Madoc Comadrin
asked Jan 19 '15 at 10:34
Madoc ComadrinMadoc Comadrin
2891322
2891322
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14
add a comment |
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14
add a comment |
3 Answers
3
active
oldest
votes
ifconfig eth0 promisc is the correct command to enable promiscuous mode for an interface. If that didn't work try adding this line to /etc/rc.local and reboot.
ifconfig eth0 up
ifconfig eth0 promisc
After using that my interfaces are now in stateUP BROADCAST RUNNING PROMISCas they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?
– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done withKVMas hypervisor? I failed to find such configuration.
– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
add a comment |
External network means the network that connects to the Internet (typically with a public IP pool or similar), other resources outside of the cloud, etc. Are you using Neutron or Nova-networking? That's mildly important, but you should be making the bridge or whatever network abstraction you're using promiscuous, rather than the NIC connected to it. The nic should then follow suit.
The reason being that we need to perform packet inspection at the virtual switch level in order to determine where those packets should go. This should be done at the hypervisor level. It sounds like you're nesting hypervisors, and that may present its own issues that need to be dealt with. Is that the case?
add a comment |
Ben Pfaff on 2013 replied (check it out):
VMware made a terrible, confusing mistake in naming here. "Promiscuous mode" has a specific meaning.
[…]
What the VMware vSwitch calls "promiscuous mode" is quite different.
When you configure promiscuous mode on a VMware vNIC, the vSwitch
sends a copy of every packet received by the vSwitch to that vNIC.
That has a much bigger effect: rather than getting a few stray packets
for which the switch does not yet know the correct destination, the
vNIC gets every packet.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f660583%2fpromiscuous-mode-in-kvm%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
ifconfig eth0 promisc is the correct command to enable promiscuous mode for an interface. If that didn't work try adding this line to /etc/rc.local and reboot.
ifconfig eth0 up
ifconfig eth0 promisc
After using that my interfaces are now in stateUP BROADCAST RUNNING PROMISCas they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?
– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done withKVMas hypervisor? I failed to find such configuration.
– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
add a comment |
ifconfig eth0 promisc is the correct command to enable promiscuous mode for an interface. If that didn't work try adding this line to /etc/rc.local and reboot.
ifconfig eth0 up
ifconfig eth0 promisc
After using that my interfaces are now in stateUP BROADCAST RUNNING PROMISCas they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?
– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done withKVMas hypervisor? I failed to find such configuration.
– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
add a comment |
ifconfig eth0 promisc is the correct command to enable promiscuous mode for an interface. If that didn't work try adding this line to /etc/rc.local and reboot.
ifconfig eth0 up
ifconfig eth0 promisc
ifconfig eth0 promisc is the correct command to enable promiscuous mode for an interface. If that didn't work try adding this line to /etc/rc.local and reboot.
ifconfig eth0 up
ifconfig eth0 promisc
answered Jan 19 '15 at 14:30
HarikrishnanHarikrishnan
68211027
68211027
After using that my interfaces are now in stateUP BROADCAST RUNNING PROMISCas they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?
– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done withKVMas hypervisor? I failed to find such configuration.
– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
add a comment |
After using that my interfaces are now in stateUP BROADCAST RUNNING PROMISCas they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?
– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done withKVMas hypervisor? I failed to find such configuration.
– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
After using that my interfaces are now in state
UP BROADCAST RUNNING PROMISC as they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?– Madoc Comadrin
Jan 20 '15 at 8:07
After using that my interfaces are now in state
UP BROADCAST RUNNING PROMISC as they were with using that command on terminal. But it not change anything. The guide speaks about hypervisor. I wonder if I need to do something to it as well?– Madoc Comadrin
Jan 20 '15 at 8:07
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
@MadocComadrin You were supposed to do this on the hypervisor!
– Michael Hampton♦
Jan 28 '16 at 2:04
How is that done with
KVM as hypervisor? I failed to find such configuration.– Madoc Comadrin
Jan 28 '16 at 11:51
How is that done with
KVM as hypervisor? I failed to find such configuration.– Madoc Comadrin
Jan 28 '16 at 11:51
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
It is not done to the hypervisor, but to the host running the hypervisor. That's what 'external network' means.
– Xalorous
Aug 12 '16 at 17:36
add a comment |
External network means the network that connects to the Internet (typically with a public IP pool or similar), other resources outside of the cloud, etc. Are you using Neutron or Nova-networking? That's mildly important, but you should be making the bridge or whatever network abstraction you're using promiscuous, rather than the NIC connected to it. The nic should then follow suit.
The reason being that we need to perform packet inspection at the virtual switch level in order to determine where those packets should go. This should be done at the hypervisor level. It sounds like you're nesting hypervisors, and that may present its own issues that need to be dealt with. Is that the case?
add a comment |
External network means the network that connects to the Internet (typically with a public IP pool or similar), other resources outside of the cloud, etc. Are you using Neutron or Nova-networking? That's mildly important, but you should be making the bridge or whatever network abstraction you're using promiscuous, rather than the NIC connected to it. The nic should then follow suit.
The reason being that we need to perform packet inspection at the virtual switch level in order to determine where those packets should go. This should be done at the hypervisor level. It sounds like you're nesting hypervisors, and that may present its own issues that need to be dealt with. Is that the case?
add a comment |
External network means the network that connects to the Internet (typically with a public IP pool or similar), other resources outside of the cloud, etc. Are you using Neutron or Nova-networking? That's mildly important, but you should be making the bridge or whatever network abstraction you're using promiscuous, rather than the NIC connected to it. The nic should then follow suit.
The reason being that we need to perform packet inspection at the virtual switch level in order to determine where those packets should go. This should be done at the hypervisor level. It sounds like you're nesting hypervisors, and that may present its own issues that need to be dealt with. Is that the case?
External network means the network that connects to the Internet (typically with a public IP pool or similar), other resources outside of the cloud, etc. Are you using Neutron or Nova-networking? That's mildly important, but you should be making the bridge or whatever network abstraction you're using promiscuous, rather than the NIC connected to it. The nic should then follow suit.
The reason being that we need to perform packet inspection at the virtual switch level in order to determine where those packets should go. This should be done at the hypervisor level. It sounds like you're nesting hypervisors, and that may present its own issues that need to be dealt with. Is that the case?
edited Nov 14 '16 at 17:49
answered Sep 13 '16 at 3:03
SpoolerSpooler
6,2041228
6,2041228
add a comment |
add a comment |
Ben Pfaff on 2013 replied (check it out):
VMware made a terrible, confusing mistake in naming here. "Promiscuous mode" has a specific meaning.
[…]
What the VMware vSwitch calls "promiscuous mode" is quite different.
When you configure promiscuous mode on a VMware vNIC, the vSwitch
sends a copy of every packet received by the vSwitch to that vNIC.
That has a much bigger effect: rather than getting a few stray packets
for which the switch does not yet know the correct destination, the
vNIC gets every packet.
add a comment |
Ben Pfaff on 2013 replied (check it out):
VMware made a terrible, confusing mistake in naming here. "Promiscuous mode" has a specific meaning.
[…]
What the VMware vSwitch calls "promiscuous mode" is quite different.
When you configure promiscuous mode on a VMware vNIC, the vSwitch
sends a copy of every packet received by the vSwitch to that vNIC.
That has a much bigger effect: rather than getting a few stray packets
for which the switch does not yet know the correct destination, the
vNIC gets every packet.
add a comment |
Ben Pfaff on 2013 replied (check it out):
VMware made a terrible, confusing mistake in naming here. "Promiscuous mode" has a specific meaning.
[…]
What the VMware vSwitch calls "promiscuous mode" is quite different.
When you configure promiscuous mode on a VMware vNIC, the vSwitch
sends a copy of every packet received by the vSwitch to that vNIC.
That has a much bigger effect: rather than getting a few stray packets
for which the switch does not yet know the correct destination, the
vNIC gets every packet.
Ben Pfaff on 2013 replied (check it out):
VMware made a terrible, confusing mistake in naming here. "Promiscuous mode" has a specific meaning.
[…]
What the VMware vSwitch calls "promiscuous mode" is quite different.
When you configure promiscuous mode on a VMware vNIC, the vSwitch
sends a copy of every packet received by the vSwitch to that vNIC.
That has a much bigger effect: rather than getting a few stray packets
for which the switch does not yet know the correct destination, the
vNIC gets every packet.
answered Jun 9 '18 at 0:43
poigepoige
7,10211437
7,10211437
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f660583%2fpromiscuous-mode-in-kvm%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I didn't find solution. Eventyally I installed network node and compute node on physical machines.
– Madoc Comadrin
Jun 9 '15 at 12:49
Openstack networking isn't so trivial, and this is NOT a KVM question at all, really. You're trying to build controller and compute nodes in a VM, you need to create a separate project, assign it some separate networks, and probably use qemu as the hypervisor on the computes, unless you enabled nesting. Really, if you have already installed and have been using openstack, you should not be asking questions about "promisc mode", but planning how to do this in the confines of a tenant/project instead.
– dyasny
Aug 12 '16 at 17:14